ds xacml checks

If we're adding another parameter, we should probably update the api.php.