
|
Issue #4: Computing document for selecting auth policy Authorization policy conditions can be based on dynamic state Authorization policies can specify composition rules or source policies that define presence document Thus its circular Need to break the circle OPTION 1: compute presence doc that would be sent to presentity themselves OPTION 2: compute presence doc that would be sent to a special identity OPTION 3: disallow this condition somehow Others? |