Changeset 7666 for TI12-security/trunk/ndg_xacml/ndg/xacml/test/esgf1.xml

Timestamp:

28/10/10 16:00:42 (10 years ago)

Author:

pjkersha

Message:

Started testing PDP with custom Group/Role? Attribute Value type. Custom match and Bag functions are needed to enable evaluation of rules using the custom type.

File:

• TI12-security/trunk/ndg_xacml/ndg/xacml/test/esgf1.xml (modified) (1 diff)

TI12-security/trunk/ndg_xacml/ndg/xacml/test/esgf1.xml

@@ -62 +62 @@
         -->
         <Condition>
-            <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-at-least-one-member-of">
+            <Apply FunctionId="urn:grouprole-at-least-one-member-of">
                 <SubjectAttributeDesignator 
-                    AttributeId="urn:ndg:security:authz:1.0:attr" 
-                    DataType="http://www.w3.org/2001/XMLSchema#string"/>
-                <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag">
-                    <AttributeValue DataType="urn:esgf:pcmdi:grouprole">
+                    AttributeId="urn:esg:attr"
+                    DataType="urn:grouprole"/>
+                <Apply FunctionId="urn:grouprole-bag">
+                    <AttributeValue DataType="urn:grouprole">
                         <esg:groupRole>
-                            <esg:group>CMIP5_Research</esg:group>
+                            <esg:group>ACME</esg:group>
                             <esg:role>default</esg:role>
                         </esg:groupRole>
                     </AttributeValue>
-                    <AttributeValue DataType="urn:esgf:pcmdi:grouprole">
+                    <AttributeValue DataType="urn:grouprole">
                         <esg:groupRole>
-                            <esg:group>CMIP5_Commercial</esg:group>
-                            <esg:role>default</esg:role>
+                            <esg:group>Staff</esg:group>
+                            <esg:role>Administrator</esg:role>
                         </esg:groupRole>
                     </AttributeValue>