NDG XACML example for unit tests: allow access for resource URIs matching given regular expressions. The subject must have at least one of a set of named attributes allocated ^http://localhost/.*$ http://localhost/resource-only-restricted staff http://localhost/single-subject-role-restricted staff http://localhost/action-and-single-subject-role-restricted read ^http://localhost/at-least-one-of-subject-role-restricted.*$ staff admin postdoc