ds xacml checks

Parameter still needs to be documented.