Extensible Access Control Markup Language
Became an OASIS standard in February 2003. XACML defines a general policy language used to protect resources as well as an access decision language.
See Phil Griffin's Introduction To XACML for some background. See also Sun's XACML Implementation and the OASIS technical committee for XACML.