3.1.4 Authorization base: decision = tas3_az_base(conf, qs, ses)

This is similar to tas3_az() with the difference that the <xac:Response> element is returned even in the deny and indeterminate cases (null is still returned if there was an error). Effectively this base form does not make judgement about whether <xac:Response> means permit, deny, or something else.

You should use this function if the Deny message contains interesting obligations (normally it does not).