I obviously agree on the need for a GUI policy administration point. There's too much work involved to implement xacml based access control without it. I also think that people won't see value in XACML when all that is there is a decision engine. There are commercial XACML implementations out there... they don't neccessarily even promote the XACML name, but they are full solutions and they are obviously seeing use in various places such as in the finance industry. Like I may have mentioned to you before, I implemented XACML at a large bank and we looked at the products because there was no open source alternative, and building and maintaining something like that ourself didn't make sense. I'd definitely be interested to work towards creating a more complete open source XACML solution. It would seem, however, that given the low interest it would end up being me running solo on it. At least until it had enough features to be more interesting to others.