Re: [xacml-comment] IIC082Policy.xml

[Anne Anderson <Anne.Anderson@Sun.com>]

John Merrells,

Thank you for reporting this error.  Corrected files for
IIC082Request.xml and IIC082Policy.xml are attached.

Anne Anderson

On 21 November, John Merrells writes: [xacml-comment] IIC082Policy.xml
 > From: John Merrells <merrells@jiffysoftware.com>
 > To: xacml-comment <xacml-comment@lists.oasis-open.org>
 > Subject: [xacml-comment] IIC082Policy.xml
 > Date: Thu, 21 Nov 2002 18:35:51 -0800
 > 
 > 
 > Line 29...
 > 
 >         <Condition 
 > FunctionId="urn:oasis:names:tc:xacml:1.0:function:rfc822Name-match">
 >             <AttributeValue
 >                   
 > DataType="urn:oasis:names:tc:xacml:1.0:data-type:rfc822Name">medico.com</AttributeValue>
 > 
 > ...first argument should be a string.
 > 
 > 
 > 
 > 
 > 
 > ----------------------------------------------------------------
 > To subscribe or unsubscribe from this elist use the subscription
 > manager: <http://lists.oasis-open.org/ob/adm.pl>
 > 

-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692

<?xml version="1.0" encoding="UTF-8"?>
<Request
      xmlns="urn:oasis:names:tc:xacml:1.0:context"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
      xsi:schemaLocation="urn:oasis:names:tc:xacml:1.0:context
        http://www.oasis-open.org/tc/xacml/1.0/cs-xacml-schema-context-01.xsd";>
    <Subject>
        <Attribute
              AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id"
              DataType="urn:oasis:names:tc:xacml:1.0:data-type:rfc822Name">
            <AttributeValue>Julius_Hibbert@MEDICO.COM</AttributeValue>
        </Attribute>
        <Attribute
              AttributeId="urn:oasis:names:tc:xacml:1.0:conformance-test:age"
              DataType="http://www.w3.org/2001/XMLSchema#integer";>
            <AttributeValue>45</AttributeValue>
        </Attribute>
    </Subject>
    <Resource>
        <Attribute
              AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id"
              DataType="http://www.w3.org/2001/XMLSchema#anyURI";>
            <AttributeValue>http://medico.com/record/patient/BartSimpson</AttributeValue>
        </Attribute>
    </Resource>
    <Action>
        <Attribute
              AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id"
              DataType="http://www.w3.org/2001/XMLSchema#string";>
            <AttributeValue>read</AttributeValue>
        </Attribute>
    </Action>
    <Environment>
        <Attribute
              AttributeId="urn:oasis:names:tc:xacml:1.0:conformance-test:bart-simpson-age"
              DataType="http://www.w3.org/2001/XMLSchema#integer";>
            <AttributeValue>10</AttributeValue>
        </Attribute>
    </Environment>
</Request>
<?xml version="1.0" encoding="UTF-8"?>
<Policy
      xmlns="urn:oasis:names:tc:xacml:1.0:policy"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
      xsi:schemaLocation="urn:oasis:names:tc:xacml:1.0:policy
        http://www.oasis-open.org/tc/xacml/1.0/cs-xacml-schema-policy-01.xsd";
      PolicyId="urn:oasis:names:tc:xacml:1.0:conformance-test:IIC082:policy"
      RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides">
    <Description>
        Policy for Conformance Test IIC082.
    </Description>
    <Target>
        <Subjects>
            <AnySubject/>
        </Subjects>
        <Resources>
            <AnyResource/>
        </Resources>
        <Actions>
            <AnyAction/>
        </Actions>
    </Target>
    <Rule
          RuleId="urn:oasis:names:tc:xacml:1.0:conformance-test:IIC082:rule"
          Effect="Permit">
        <Description>
            Anyone from medico.com can perform any action on any resource.
        </Description>
        <Condition FunctionId="urn:oasis:names:tc:xacml:1.0:function:rfc822Name-match">
            <AttributeValue
                  DataType="http://www.w3.org/2001/XMLSchema#string";>medico.com</AttributeValue>
            <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:rfc822Name-one-and-only">
                <SubjectAttributeDesignator
                      AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id"
                          DataType="urn:oasis:names:tc:xacml:1.0:data-type:rfc822Name"/>
            </Apply>
        </Condition>
    </Rule>
</Policy>