...
- Wildcards may be used for Subject, Action, Resource and Scope.
- Limits can be expressed as a sequence of atomic predicates "X Rel Y" joined by logical operators, AND, OR, NOT, XOR. Rel defines any relationship where X specifies some attriibute value of the elements of the policy expression or some environmental/contextual variable and Y is the range of Rel a proposition and Rel evaluates to T or F for any values of X and Y.
...