Having given this some time to sit out there, it seems that my thoughts haven't generated any discussion at all. I guess there isn't a ton of interest in the XACML piece of this.. or do you think it is being used more than it seems, Anil? I think it is understandable though.. a PDP alone just isn't too exciting, it's really one part of an overall access control solution and writing policy files isn't a whole lot of fun either. I feel like a more complete XACML solution, would have a great deal more use. I'm just not sure if there is even any interest level for this in PicketBox or even in the JBoss community... based on the lack of feedback so far I guess.