[convolvatron]

I don't see the dichotomy. in all the work I've done lately in this area there is a defined schema for a rule - so its really not that hard to be code and data, maybe even more so in a declarative world.

[kkajla]

That's fair and also why I believe a complete authz solution needs some elements of both.