...
- Wildcards may be used for Subject, Action, Resource and/or Scope.
- Limits can be expressed as a sequence of atomic predicates "X Rel Y" joined by logical operators, AND, OR, NOT, XOR. Rel defines any relationship where X specifies some attriibute value of the elements of the policy expression or some environmental/contextual variable, Y is a proposition and Rel evaluates to T or F for any values of X and Y.
...