Hi guys, I’d like to question a basic assumption in UMA as it’s defined now. I have a use case where a query to the RS concerns several resource sets. Typically a problem you will have when you’re dealing with hierarchically organized or grouped information. According to 3.2.1 ”The body of the HTTP request message contains a JSON object providing the requested permission” Note! the ’a’. I’d like it to be a list ! Such that I can bind one ticket to a set of permissions not just one. The other option is that I gather a set of tickets, one per permission, return them to the client which then gets the AS to binds them to one RPT. I’d prefer the first option. — Roland 'Look, that's why there's rules, understand? So that you think before you break ’em.’ - Terry Pratchett