xacml:Obligation

Element information

Namespace: urn:oasis:names:tc:xacml:2.0:policy:schema:os

Schema document: access_control-xacml-2.0-policy-schema-os.xsd

Properties: Global, Qualified

Content

xacml:AttributeAssignment [0..*]

Attributes

Name	Occ	Type	Description	Notes
ObligationId	[1..1]	xsd:anyURI
FulfillOn	[1..1]	xacml:EffectType

Used in

Type xacml:ObligationsType (Element xacml:Obligations)

Sample instance

<Obligation            ObligationId="urn:oasis:names:tc:xacml:example:obligation:email"
            FulfillOn="Permit">
   <AttributeAssignment AttributeId="urn:oasis:names:tc:xacml:2.0:example:attribute:mailto"
                        DataType="http://www.w3.org/2001/XMLSchema#string">
      <AttributeSelector RequestContextPath="//md:/record/md:patient/md:patientContact/md:email"
                         DataType="http://www.w3.org/2001/XMLSchema#string"/>
   </AttributeAssignment>
   <AttributeAssignment AttributeId="urn:oasis:names:tc:xacml:2.0:example:attribute:text"
                        DataType="http://www.w3.org/2001/XMLSchema#string">
     Your medical record has been accessed by:
   </AttributeAssignment>
   <AttributeAssignment AttributeId="urn:oasis:names:tc:xacml:2.0:example:attribute:text"
                        DataType="http://www.w3.org/2001/XMLSchema#string">
      <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id"
                                  DataType="http://www.w3.org/2001/XMLSchema#string"/>
   </AttributeAssignment>
</Obligation>