From: Erik Rissanen [mailto:er...@axiomatics.com]
Sent: Thursday, June 16, 2011 10:57 AM
Subject: Re: [xacml] wd-20 issues
My understanding was the following:
7.7 Target evaluation
"An empty target matches any request. Otherwise the target value SHALL be "Match" if all the AnyOf specified in the target match values in the request context."
=> All the <AnyOf>s must match
"For the parent of the<Target> element to be applicable to the decision request, there MUST be at least one positive match between each<AnyOf> element of the<Target> element and the corresponding section of the<Request> element."
=> Any of the <AnyOf>s must match
This, however, is just my misreading: I got fooled by the "at least one" part. So I agree there is no issue, although maybe the wording could be a bit improved.