xacml:Rule

Element information

Content

• Sequence [1..1]
  1. xacml:Description [0..1]    
  2. xacml:Target [0..1]    
  3. xacml:Condition [0..1]    
  4. xacml:ObligationExpressions [0..1]    
  5. xacml:AdviceExpressions [0..1]    

Attributes

Used in

• Type xacml:PolicyType (Element xacml:Policy)

Sample instance

<Rule      RuleId="urn:oasis:names:tc:xacml:3.0:example:SimpleRule1"
      Effect="Permit">
   <Description> Any subject with an e-mail name in the med.example.com domain can perform any action on any resource. </Description>
   <Target>
      <AnyOf>
         <AllOf>
            <Match MatchId="urn:oasis:names:tc:xacml:1.0:function:rfc822Name-match">
               <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">med.example.com</AttributeValue>
               <AttributeDesignator MustBePresent="false"
                                    Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject"
                                    AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id"
                                    DataType="urn:oasis:names:tc:xacml:1.0:data-type:rfc822Name"/>
            </Match>
         </AllOf>
      </AnyOf>
   </Target>
</Rule>