Changes between Version 8 and Version 9 of XACML
- Timestamp:
- 03/09/10 17:11:43 (10 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
XACML
v8 v9 207 207 }}} 208 208 Any rule which follows for which a match is made, grants access. For example, 209 * The `ResourceBased` rule, restricts based on resource URI only. It overrides the previous `DenyAllRule` for requests to `http://localhost/resource-only-restricted`. 209 * The `ResourceBased` rule, restricts based on resource URI only. It overrides the previous `DenyAllRule` for requests to `http://localhost/resource-only-restricted`. No Subjects are defined here so access is open to it from any subject. 210 210 * the rule ID'd `AtLeastOneSubjectAttributeBased` grants access to any URI which begins with `http://localhost/at-least-of-subject-role-restricted`, provided the subject (the person or entity requesting access) has at least one of the attributes, `staff`, `admin` or `postdoc`. 211 211