XACMLTestPolicies.valid-policies.Permit-API-M-OnlyFromLocalhost.xml Maven / Gradle / Ivy

Go to download
<?xml version="1.0" encoding="UTF-8"?>
<Policy xmlns="urn:oasis:names:tc:xacml:1.0:policy"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        PolicyId="Permit-API-M-OnlyFromLocalhost"
        RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:first-applicable">
    <Description>Permit Managing Repository (API-M) Allow access attempts from the machine localhost</Description>
    <Target>
        <Subjects>
            <AnySubject/>
        </Subjects>
        <Resources>
            <AnyResource/>
        </Resources>
        <Actions>
            <Action>
                <ActionMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                    <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">urn:fedora:names:fedora:2.1:action:api-m</AttributeValue>
                    <ActionAttributeDesignator DataType="http://www.w3.org/2001/XMLSchema#string"
                            AttributeId="urn:fedora:names:fedora:2.1:action:api"/>
                </ActionMatch>
            </Action>
        </Actions>
    </Target>
    <Rule RuleId="1" Effect="Permit">
        <Condition FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-at-least-one-member-of">
            <EnvironmentAttributeDesignator AttributeId="urn:fedora:names:fedora:2.1:environment:http-request:client-ip-address" DataType="http://www.w3.org/2001/XMLSchema#string"/>
            <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag">
                <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">127.0.0.1</AttributeValue>
            </Apply>
        </Condition>
    </Rule>
</Policy>