It is not unusual for a topic to fit into more than one forum. In addition to Security forum, "XML and Related Technologies" and "Web Services" are both good places to discuss XACML, since it can be used as a stand alone security implementation, or can be combined with a WebServices toolkit.
Open Group Certified Distinguished IT Architect. Open Group Certified Master IT Architect. Sun Certified Architect (SCEA).