Prototype
char* tas3_az_cf_ses(tas3_conf* cf, const char* qs, tas3_ses* ses);
Call Policy Decision Point (PDP) to obtain an authorization decision about a contemplated action on a resource.
the configuration object
additional attributes that are passed to PDP
session object, from which most attributes come
0 on deny (for any reason, e.g. indeterminate), or non-null if permit.