xacml:ObligationExpression

Element information

Namespace: urn:oasis:names:tc:xacml:3.0:core:schema:wd-17

Schema document: xacml-core-v3-schema-wd-17.xsd

Properties: Global, Qualified

Content

xacml:AttributeAssignmentExpression [0..*]

Attributes

Name	Occ	Type	Description	Notes
ObligationId	[1..1]	xsd:anyURI
FulfillOn	[1..1]	xacml:EffectType

Used in

Type xacml:ObligationExpressionsType (Element xacml:ObligationExpressions)

Sample instance

<ObligationExpression                      ObligationId="urn:oasis:names:tc:xacml:example:obligation:email"
                      FulfillOn="Permit">
   <AttributeAssignmentExpression AttributeId="urn:oasis:names:tc:xacml:3.0:example:attribute:mailto">
      <AttributeSelector MustBePresent="true"
                         Category="urn:oasis:names:tc:xacml:3.0:attribute-category:resource"
                         Path="md:record/md:patient/md:patientContact/md:email"
                         DataType="http://www.w3.org/2001/XMLSchema#string"/>
   </AttributeAssignmentExpression>
   <AttributeAssignmentExpression AttributeId="urn:oasis:names:tc:xacml:3.0:example:attribute:text">
      <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">Your medical record has been accessed by:</AttributeValue>
   </AttributeAssignmentExpression>
   <AttributeAssignmentExpression AttributeId="urn:oasis:names:tc:xacml:3.0:example:attribute:text">
      <AttributeDesignator MustBePresent="false"
                           Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject"
                           AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id"
                           DataType="http://www.w3.org/2001/XMLSchema#string"/>
   </AttributeAssignmentExpression>
</ObligationExpression>