recipe -> operation
added response example
Will cherry pick to frankfurt.
Issue-ID: POLICY-2656
Change-Id: Ia0e5c75d29edcecce54709f3659d3cd8f5bcfd15
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
(cherry picked from commit 
9a89058def115a2f5ec62bca719697d7bc738ece)
   "resource": {
       "guard": {
           "actor": "SO",
-          "recipe": "VF Module Create",
+          "operation": "VF Module Create",
           "clname": "ControlLoop-vDNS-6f37f56d-a87d-4b85-b6a9-cc953cf779b3",
           "target": "vLoadBalancer-00",
           "vfCount": "1"
 
--- /dev/null
+{"status":"Permit"}
\ No newline at end of file
 
 .. literalinclude:: decision.guard.json
   :language: JSON
 
+The return decision simply has "permit" or "deny" in the response to tell the calling application whether they are allowed to perform the operation.
+
+.. literalinclude:: decision.guard.response.json
+  :language: JSON
+
 .. _xacml-optimization-label:
 
 Optimization Policy Types