Sample XACML Policy showing access by user role http://www.hhs.gov/healthit/nhin#retrieveDocument deny all access to documents.