[jboss-cvs] jbosstest/src/resources/web/xacml/requestAttrib/WEB-INF ...

[Anil S. <ani...@jb...>]

  User: asaldhana
  Date: 06/07/07 12:44:59

  Added:       src/resources/web/xacml/requestAttrib/WEB-INF  
                        jboss-xacml-policy.xml
  Removed:     src/resources/web/xacml/requestAttrib/WEB-INF  
                        xacml-policy.xml
  Log:
  JBAS-2673: Replace the xacml policy files
  
  Revision  Changes    Path
  1.1      date: 2006/07/07 16:44:59;  author: asaldhana;  state: Exp;jbosstest/src/resources/web/xacml/requestAttrib/WEB-INF/jboss-xacml-policy.xml
  
  Index: jboss-xacml-policy.xml
  ===================================================================
  <?xml version="1.0" encoding="UTF-8"?>
  <Policy xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os
          access_control-xacml-2.0-policy-schema-os.xsd"
        PolicyId="urn:oasis:names:tc:xacml:2.0:jboss-test:XV:policy"
        RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides">
      <Description> Policy for Test XVII. </Description>
      <Target/>
      <Rule RuleId="urn:oasis:names:tc:xacml:2.0:jboss-test:XVI:rule"
            Effect="Permit">
          <Description>
          jduke can read or write resource information when the request parameter "status" in Action has a value "employed" 
          </Description>
          <Target>
              <Subjects>
                  <Subject>
                      <SubjectMatch
                            MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                          <AttributeValue
                                DataType="http://www.w3.org/2001/XMLSchema#string">jduke</AttributeValue>
                          <SubjectAttributeDesignator
                                AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id"
                                DataType="http://www.w3.org/2001/XMLSchema#string"/>
                      </SubjectMatch> 
                  </Subject>
              </Subjects>
              <Resources>
                  <Resource>
                      <ResourceMatch
                            MatchId="urn:oasis:names:tc:xacml:1.0:function:anyURI-equal">
                          <AttributeValue
                                DataType="http://www.w3.org/2001/XMLSchema#anyURI">/xacml-requestattrib/test</AttributeValue>
                          <ResourceAttributeDesignator
                                AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id"
                                DataType="http://www.w3.org/2001/XMLSchema#anyURI"/>
                      </ResourceMatch>
                  </Resource>
              </Resources>
              <Actions>
                  <Action>
                      <ActionMatch
                            MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                          <AttributeValue
                                DataType="http://www.w3.org/2001/XMLSchema#string">read</AttributeValue>
                          <ActionAttributeDesignator
                                AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id"
                                DataType="http://www.w3.org/2001/XMLSchema#string"/>
                      </ActionMatch>
                      <ActionMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                          <AttributeValue 
                       DataType="http://www.w3.org/2001/XMLSchema#string">employed</AttributeValue>
                          <ActionAttributeDesignator 
                       AttributeId="urn:oasis:names:tc:xacml:2.0:request-param:attribute:status" 
                       DataType="http://www.w3.org/2001/XMLSchema#string"/>
                      </ActionMatch> 
                  </Action>
                  <Action>
                      <ActionMatch
                            MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                          <AttributeValue
                                DataType="http://www.w3.org/2001/XMLSchema#string">write</AttributeValue>
                          <ActionAttributeDesignator
                                AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id"
                                DataType="http://www.w3.org/2001/XMLSchema#string"/>
                      </ActionMatch> 
                 <ActionMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                          <AttributeValue 
                       DataType="http://www.w3.org/2001/XMLSchema#string">employed</AttributeValue>
                          <ActionAttributeDesignator 
                       AttributeId="urn:oasis:names:tc:xacml:2.0:request-param:attribute:status" 
                       DataType="http://www.w3.org/2001/XMLSchema#string"/>
                      </ActionMatch>
               </Action>
              </Actions>
          </Target> 
      </Rule>
  </Policy>