Andres Martinelli

In a previous blog post ​we discussed the use of XACML obligations and advice. I concluded the post with the cliff hanger: An interesting use of advice is as a means to tell the PEP the reasons why a request has been denied; but to show you how this is done I would need to introduce you to the

Imagine that you are designing a policy for your business, which happens to be a top-notch hospital, and bump into the following legal requirement: A physician can access a medical record from one of her patients provided this access is reported to the patient If you are familiar with XACML,