source: TI12-security/trunk/ndg_xacml/ndg/xacml/test/rule1.xml @ 7064

<?xml version="1.0" encoding="UTF-8"?>
<Policy xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os" 
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
    xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os http://docs.oasis-open.org/xacml/access_control-xacml-2.0-policy-schema-os.xsd" 
    PolicyId="urn:oasis:names:tc:example:SimplePolicy1" 
    RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides">
    <Description>
        Med Example Corp access control policy
    </Description>
    <Target/>
    <Rule RuleId="urn:oasis:names:tc:xacml:2.0:example:SimpleRule1" Effect="Permit">
        <Description>
            Any subject with an e-mail name in the med.example.com domain
            can perform any action on any resource.
        </Description>
        <Target>
            <Subjects>
                <Subject>
                    <SubjectMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:rfc822Name-match">
                        <AttributeValue DataType="urn:oasis:names:tc:xacml:1.0:data-type:rfc822Name">
                            med.example.com
                        </AttributeValue>
                        <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id" DataType="urn:oasis:names:tc:xacml:1.0:data-type:rfc822Name"/>
                    </SubjectMatch>
                </Subject>
            </Subjects>
        </Target>
    </Rule>
</Policy>