store xacml object when determining which ds are viewable or downloadabl...

...e