113
Recap
<AuthzDecisionStatement
Resource="http://www.CarRentalInc.com/employees/salaries"
Decision="Deny">
<Action
Namespace="urn:oasis:names:tc:SAML:1.0:action:rwedc-negation">Read</Action>
<Evidence>
<AssertionIDRef>faaf0443q</AssertionIDRef>
</Evidence>
</AuthzDecisionStatement>
"The
decision is that the subject (j.doe@acompany.com) should be denied read access to the employee salaries. The assertion whose id is faaf0443q was relied on to make the decision."