[security-dev] Entitlements Concept

Hi All, any objections to getting the Entitlements Manager concept into PicketLink Authorization? That way we cover all based with both Fine Grained Authorization (Permissions API/Implementation) as well as download of entitlements. My previous prototype: https://docs.jboss.org/author/display/SECURITY/EntitlementsManager (there are bugs in the test case which I will fix) While the FGA is what I call the Enforcement Model, the EntitlementsManager concept is what I call the Entitlement Model. I am currently writing a specification at OASIS for this: https://www.oasis-open.org/committees/document.php?document_id=52098&... Regards, Anil