simple-8----Page:7
1  2  3  4  5  6  7  8 

Issue #4: Computing document for selecting auth policy
Authorization policy conditions can be based on dynamic state
for example
Authorization policies can specify composition rules or source policies that define presence document
Thus its circular
Need to break the circle

OPTION 1: compute presence doc that would be sent to presentity themselves
OPTION 2: compute presence doc that would be sent to a special identity
OPTION 3: disallow this condition somehow
Others?
PPT Version