xacml:Rule

Element information

Namespace: urn:oasis:names:tc:xacml:2.0:policy:schema:os

Schema document: access_control-xacml-2.0-policy-schema-os.xsd

Properties: Global, Qualified

Content

Sequence [1..1]
1. xacml:Description [0..1]
2. xacml:Target [0..1]
3. xacml:Condition [0..1]

Attributes

Name	Occ	Type	Description	Notes
RuleId	[1..1]	xsd:string
Effect	[1..1]	xacml:EffectType

Used in

Type xacml:PolicyType (Element xacml:Policy)

Sample instance

<Rule      RuleId="urn:oasis:names:tc:xacml:2.0:example:SimpleRule1"
      Effect="Permit">
   <Description>
   Any subject with an e-mail name in the med.example.com domain
   can perform any action on any resource.
  		</Description>
   <Target>
      <Subjects>
         <Subject>
            <SubjectMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:rfc822Name-match">
               <AttributeValue DataType="urn:oasis:names:tc:xacml:1.0:data-type:rfc822Name">
       med.example.com
      						</AttributeValue>
               <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id"
                                           DataType="urn:oasis:names:tc:xacml:1.0:data-type:rfc822Name"/>
            </SubjectMatch>
         </Subject>
      </Subjects>
   </Target>
</Rule>