2 "context" specifies the subset of the requestor context that this match needs to see. It is specified as an xpath expression.
3 For this simple match, we just need to look at sfa-input.
5 "rule" specifies a set of arguments that the match accepts.
9 <!-- Empty context. We _always_ get the hrn of the current user -->
11 <context select="//sfa/current/user@hrn"/>
14 <help>HRN of the user requesting resouces</help>
15 <operand>HRN</operand>
17 <processor filename="hrn.xsl"/>