External Authorization manager

Hi All,

I was just wondering what will be a good approch to Externalize Authorization from application code. Is it possible to do a application context sensitive rule based authorization via an external Authorization manager. XACML maybe

If we narrow down the domain to just web services, can WS-Policy be used to create and enforce general purpose authorization policy

Is there already something out there

Regards,

Rana