Hi,
what I see is that there are COTS solutions, that are conceptually not much further on the "adoption curve"... We need a good pap implementation that is tailorable to the domain experts, to their vocabulary. The role of the "policy modeller" is not very well described up to now. It is not an IT admin, it is more the Service Manager. So we build a kind of eclipse rcp app that consumes a dsl to generate XACML and distributes it on a set of preconfigured pdps...
May be requirements analysis helps us to understand, why the standard is still not widely used.
->cb