FERPA question

[Peter Schober]

* Nickles, Brent <bnick001 at umaryland.edu> [2012-10-26 17:02]:
> Hello, I'm trying to test the following scenario:  Suppress
> attributes being released to SP's based on our Ferpa Flag, except I
> want to release them to SP's that I have specially requested them to
> be released to.   I have the following, but the denyonBuckley always
> seems to take precedence.

"a deny always takes precedence over a permit."
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttributeFilter
-peter