The logic of XACML
We derive a logic that precisely captures the intentions of the standard XACML 3.0. We formally define semantics for the XACML 3.0 component evaluation. We formally define semantics for the XACML 3.0 standard combining operators. We provide an alternative way of characterizing the policy combining operators. We extend XACML by providing new combining operators and notion of conflict.
xacml 3.0 access control control systems composition policies