An XML-based access control policy language and framework that defines fine-grained, attribute-based access control policies for managing authorization decisions across distributed systems.