There is a typo in PolicyId attribute in the template access_control/policy.xacml: role.id instead of role_id. This is causing all PolicyIds to be the same empty string in the PDP (causing Policy conflicts during evaluation). PolicyIds must be unique in XACML. I created a pull request to help fix it.
There is a typo in PolicyId attribute in the template
access_control/policy.xacml
:role.id
instead ofrole_id
. This is causing all PolicyIds to be the same empty string in the PDP (causing Policy conflicts during evaluation). PolicyIds must be unique in XACML. I created a pull request to help fix it.