xacml:Obligations

Element information

Namespace: urn:oasis:names:tc:xacml:2.0:policy:schema:os

Schema document: access_control-xacml-2.0-policy-schema-os.xsd

Type: xacml:ObligationsType

Properties: Global, Qualified

Content

xacml:Obligation [1..*]

Attributes

None

Used in

Type xacml-context:ResultType (Element xacml-context:Result)
Type xacml:PolicySetType (Element xacml:PolicySet)
Type xacml:PolicyType (Element xacml:Policy)

Sample instance

<Obligations>
   <Obligation ObligationId="urn:oasis:names:tc:xacml:example:obligation:email"
               FulfillOn="Permit">
      <AttributeAssignment AttributeId="urn:oasis:names:tc:xacml:2.0:example:attribute:mailto"
                           DataType="http://www.w3.org/2001/XMLSchema#string">
         <AttributeSelector RequestContextPath="//md:/record/md:patient/md:patientContact/md:email"
                            DataType="http://www.w3.org/2001/XMLSchema#string"/>
      </AttributeAssignment>
      <AttributeAssignment AttributeId="urn:oasis:names:tc:xacml:2.0:example:attribute:text"
                           DataType="http://www.w3.org/2001/XMLSchema#string">
     Your medical record has been accessed by:
   </AttributeAssignment>
      <AttributeAssignment AttributeId="urn:oasis:names:tc:xacml:2.0:example:attribute:text"
                           DataType="http://www.w3.org/2001/XMLSchema#string">
         <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id"
                                     DataType="http://www.w3.org/2001/XMLSchema#string"/>
      </AttributeAssignment>
   </Obligation>
</Obligations>