test-objects.xacml.test-policy-state-rel2.xml Maven / Gradle / Ivy

Go to download
<?xml version="1.0" encoding="UTF-8"?>
<Policy
	xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os"
	xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-policy-schema-os.xsd
						urn:oasis:names:tc:xacml:2.0:context:schema:os http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-context-schema-os.xsd"
	PolicyId="test-policy-00"
	RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides">
	<Description>Test policy - Deny if deleted - based on relationship - xacml resource id is mapped to relationship name</Description>
	<Target>
		<Resources>
			<Resource>
        <!-- match on resource state = deleted -->
				<ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:anyURI-equal">
					<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#anyURI">info:fedora/fedora-system:def/model#Deleted</AttributeValue>
					<ResourceAttributeDesignator AttributeId="http://www.example.org/fedora/xacml/attributes/resource#rel-state" DataType="http://www.w3.org/2001/XMLSchema#anyURI" />
				</ResourceMatch>
			</Resource>
		</Resources>
	</Target>
	<Rule Effect="Deny" RuleId="au:edu:mq:melcoe:ramp:fedora:xacml:2.0:rule:generic-deny" />
</Policy>