1 <!DOCTYPE signed-policy SYSTEM "bondixml.dtd">
5 <Signature Id="SignatureExample" xmlns="http://www.w3.org/2000/09/xmldsig#">
7 <CanonicalizationMethod Algorithm="http://www.w2.org/2006/12/xml-c14n11"/>
8 <SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
9 <Reference URI="Policy-1">
10 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
11 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
13 <Reference URI="Policy-2">
14 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
15 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
17 <Reference URI="Policy-3">
18 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
19 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
21 <Reference URI="Policy-4">
22 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
23 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
25 <Reference URI="Policy-5">
26 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
27 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
29 <Reference URI="Policy-6">
30 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
31 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
33 <Reference URI="Policy-7">
34 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
35 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
37 <Reference URI="Policy-8">
38 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
39 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
41 <Reference URI="Policy-9">
42 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
43 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
45 <Reference URI="Policy-10">
46 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
47 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
49 <Reference URI="Policy-11">
50 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
51 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
53 <Reference URI="Policy-12">
54 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
55 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
57 <Reference URI="Policy-13">
58 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
59 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
61 <Reference URI="Policy-14">
62 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
63 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
65 <Reference URI="Policy-15">
66 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
67 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
69 <Reference URI="Policy-16">
70 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
71 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
73 <Reference URI="Policy-17">
74 <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
75 <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
78 <SignatureValue>asdfkjlhxvczxnbcvnjahfjhsdfklahfdas</SignatureValue>
82 <P> PValue </P><Q> QValue </Q><G> Gvalue </G><Y> laj?</Y>
94 <X509SubjectName> Subject name </X509SubjectName>
95 <X509SKI> SKI </X509SKI>
102 <policy-set id="Policy-1">
103 <policy-set combine="first-matching-target">
106 <subject-match attr="id">
111 <subject-match attr="id" match="subject2" />
117 <subject-match attr="id" match="subject" />
120 <rule effect="permit">
122 <resource-match attr="resource-id">
125 <subject-match attr="version" match="3" />
132 <subject-match attr="id" match="subject2" />
137 <resource-match attr="resource-id">
147 <subject-match attr="id">
152 <subject-match attr="id" match="subject4" />
156 <rule effect="permit">
158 <resource-match attr="resource-id">
167 <resource-match attr="resource-id">
176 <subject-match attr="id">
179 <subject-match attr="version" match="4" />
182 <rule effect="permit">
184 <resource-match attr="resource-id">
191 <policy-set id="Policy-2" combine="first-matching-target">
194 <subject-match attr="id" match="subject5" />
197 <subject-match attr="id" match="subject6" />
203 <subject-match attr="id">
208 <rule effect="permit">
209 <condition combine="and">
210 <resource-match attr="resource-id">
213 <subject-match attr="version" match="5" />
218 <rule effect="permit">
219 <condition combine="or">
220 <resource-match attr="resource-id">
223 <subject-match attr="version" match="6" />
229 <policy-set id="Policy-3" combine="deny-overrides">
232 <subject-match attr="id" match="subject7" />
236 <rule effect="permit">
237 <condition combine="and">
238 <resource-match attr="resource-id">
241 <condition combine="and">
242 <condition combine="or">
243 <subject-match attr="version" match="7" />
244 <subject-match attr="version" match="6" />
246 <resource-match attr="author" match="author2" />
252 <rule effect="permit">
253 <condition combine="and">
254 <resource-match attr="resource-id">
257 <condition combine="or">
258 <condition combine="or">
259 <subject-match attr="version" match="1" />
260 <subject-match attr="version" match="2" />
262 <resource-match attr="author" match="author3" />
269 <condition combine="and">
270 <resource-match attr="resource-id">
273 <condition combine="or">
274 <condition combine="or">
275 <subject-match attr="version" match="1" />
276 <subject-match attr="version" match="2" />
278 <resource-match attr="author" match="author3" />
285 <policy-set id="Policy-4" combine="first-matching-target">
288 <subject-match attr="id">s8a</subject-match>
292 <rule effect="permit">
293 <condition combine="and">
294 <resource-match attr="resource-id">r8</resource-match>
295 <resource-match attr="r8v1" match="1" />
301 <condition combine="and">
302 <resource-match attr="resource-id">r8</resource-match>
303 <resource-match attr="r8v2" match="2" />
309 <policy-set id="Policy-5" combine="first-matching-target">
312 <subject-match attr="id">s8b</subject-match>
317 <condition combine="and">
318 <resource-match attr="resource-id">r8</resource-match>
319 <resource-match attr="r8v2" match="2" />
324 <rule effect="permit">
325 <condition combine="and">
326 <resource-match attr="resource-id">r8</resource-match>
327 <resource-match attr="r8v1" match="1" />
333 <policy-set id="Policy-6" combine="first-matching-target">
336 <subject-match attr="id">s8c</subject-match>
340 <rule effect="permit">
341 <condition combine="and">
342 <resource-match attr="resource-id">r8</resource-match>
343 <resource-match attr="r8v1" match="1" />
344 <resource-match attr="r8v2" match="1" />
349 <rule effect="deny" />
353 <policy-set id="Policy-7" combine="first-matching-target">
356 <subject-match attr="id">s9a</subject-match>
360 <rule effect="permit">
361 <condition combine="and">
362 <resource-match attr="resource-id">r9</resource-match>
363 <resource-match attr="r9a.scheme" match="http://onet.pl:80/test.html" />
369 <condition combine="and">
370 <resource-match attr="resource-id">r9</resource-match>
371 <resource-match attr="r9a" match="*" func="glob"/>
377 <policy-set id="Policy-8" combine="first-matching-target">
380 <subject-match attr="id">s9b</subject-match>
385 <condition combine="and">
386 <resource-match attr="resource-id">r9</resource-match>
387 <resource-match attr="r9b.authority" match="http://onet.pl:80/test.html" />
392 <rule effect="permit">
393 <condition combine="and">
394 <resource-match attr="resource-id">r9</resource-match>
395 <resource-match attr="r9b" match="777" func="equal" />
401 <policy-set id="Policy-9" combine="first-matching-target">
404 <subject-match attr="id">s9c</subject-match>
409 <condition combine="and">
410 <resource-match attr="resource-id">r9</resource-match>
411 <resource-match attr="r9c.scheme" match="http" />
418 <condition combine="and">
419 <resource-match attr="resource-id">r9</resource-match>
420 <resource-match attr="r9c.authority" match="onet.pl" />
426 <rule effect="permit">
427 <condition combine="and">
428 <resource-match attr="resource-id">r9</resource-match>
429 <resource-match attr="r9c.scheme-authority" match="http://onet.pl" />
435 <condition combine="and">
436 <resource-match attr="resource-id">r9</resource-match>
437 <resource-match attr="r9c" match="*" func="glob" />
443 <policy-set id="Policy-10" combine="first-matching-target">
446 <subject-match attr="id">s9d</subject-match>
451 <condition combine="and">
452 <resource-match attr="resource-id">r9</resource-match>
453 <resource-match attr="r9d.scheme" match="http://onet.pl:80/test.html" />
459 <condition combine="and">
460 <resource-match attr="resource-id">r9</resource-match>
461 <resource-match attr="r9d.authority" match="http://onet.pl:80/test.html" />
467 <condition combine="and">
468 <resource-match attr="resource-id">r9</resource-match>
469 <resource-match attr="r9d" match="*" func="glob" />
474 <rule effect="permit">
475 <condition combine="and">
476 <resource-match attr="resource-id">r9</resource-match>
477 <resource-match attr="r9d.scheme-authority" match="http://onet.pl:80/test.html" />
483 <policy-set id="Policy-11" combine="first-matching-target">
486 <subject-match attr="id">s9e</subject-match>
491 <condition combine="and">
492 <resource-match attr="resource-id">r9</resource-match>
493 <resource-match attr="r9e.host" match="http://onet.pl:80/test.html" />
498 <rule effect="permit">
499 <condition combine="and">
500 <resource-match attr="resource-id">r9</resource-match>
501 <resource-match attr="r9e" match="*" func="glob"/>
507 <policy-set id="Policy-12" combine="first-matching-target">
510 <subject-match attr="id">s9f</subject-match>
514 <rule effect="permit">
515 <condition combine="and">
516 <resource-match attr="resource-id">r9</resource-match>
517 <resource-match attr="r9e.host" match="http://onet.pl:80/test.html" />
523 <condition combine="and">
524 <resource-match attr="resource-id">r9</resource-match>
525 <resource-match attr="r9e" match="*" func="glob"/>
531 <policy-set id="Policy-13" combine="first-matching-target">
534 <subject-match attr="id">s9g</subject-match>
539 <condition combine="and">
540 <resource-match attr="resource-id">r9</resource-match>
541 <resource-match attr="r9g.path" match="http://onet.pl:80/test.html" />
546 <rule effect="permit">
547 <condition combine="and">
548 <resource-match attr="resource-id">r9</resource-match>
549 <resource-match attr="r9g" match="*" func="glob"/>
555 <policy-set id="Policy-14" combine="first-matching-target">
558 <subject-match attr="id">s9h</subject-match>
562 <rule effect="permit">
563 <condition combine="and">
564 <resource-match attr="resource-id">r9</resource-match>
565 <resource-match attr="r9g.path" match="http://onet.pl:80/test.html" />
571 <condition combine="and">
572 <resource-match attr="resource-id">r9</resource-match>
573 <resource-match attr="r9g" match="*" func="glob"/>
579 <policy-set id="Policy-15" combine="first-matching-target">
582 <subject-match attr="id">s10a</subject-match>
586 <rule effect="permit">
587 <condition combine="and">
588 <resource-match attr="resource-id">r10</resource-match>
589 <resource-match attr="r10a" match="[1234567890]+[ab]+" func="regexp" />
595 <condition combine="and">
596 <resource-match attr="resource-id">r10</resource-match>
597 <resource-match attr="r10a" match="*" func="glob"/>
603 <policy-set id="Policy-16" combine="first-matching-target">
606 <subject-match attr="id">s10b</subject-match>
611 <condition combine="and">
612 <resource-match attr="resource-id">r10</resource-match>
613 <resource-match attr="r10a" match="[1234567890]+[ab]+" func="regexp" />
618 <rule effect="permit">
619 <condition combine="and">
620 <resource-match attr="resource-id">r10</resource-match>
621 <resource-match attr="r10a" match="*" func="glob"/>
627 <policy-set id="Policy-17" combine="first-matching-target">
630 <subject-match attr="id">s10c</subject-match>
634 <rule effect="permit">
635 <condition combine="and">
636 <resource-match attr="resource-id">r10</resource-match>
637 <resource-match attr="r10c" match="[1234567890]+[ab]+" func="regexp" />
643 <condition combine="and">
644 <resource-match attr="resource-id">r10</resource-match>
645 <resource-match attr="r10c" match="*" func="glob"/>
654 <!--- test 13 (old name: test 100)-->
657 <policy-set combine="first-matching-target">
660 <subject-match attr="id">s13</subject-match>
664 <rule effect="permit">
665 <condition combine="and">
666 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
674 <!--- test 14 (old name: test 101)-->
676 <policy-set combine="first-matching-target">
679 <subject-match attr="id">s14</subject-match>
683 <rule effect="permit">
684 <condition combine="and">
685 <resource-match attr="resource-id" match="device:pim.contacts"/>
686 <subject-match attr="version" match="5"/>
693 <!--- test 15 (old name: test 102) -->
695 <policy-set combine="first-matching-target">
698 <subject-match attr="uri.host" match="//buu.com.pl"/>
702 <rule effect="permit">
703 <condition combine="and">
704 <resource-match attr="resource-id" match="device:pim.contacts"/>
710 <!--- test 16 (old name: test 103) -->
712 <policy-set combine="first-matching-target">
715 <subject-match attr="id">s16</subject-match>
716 <subject-match attr="uri.host" match="v.com.pl"/>
721 <rule effect="permit">
722 <condition combine="and">
723 <resource-match attr="resource-id" match="device:pim.contacts"/>
731 <!--- test 17 (old name: test 104)-->
733 <policy-set combine="first-matching-target">
736 <subject-match attr="id">subject4</subject-match>
737 <subject-match attr="version" match="4" />
741 <rule effect="permit">
743 <resource-match attr="resource-id">
752 <policy-set combine="first-matching-target">
755 <subject-match attr="id">subject5</subject-match>
756 <subject-match attr="version" match="4" />
762 <resource-match attr="resource-id">
770 <!--- test 18 (old name: test 105)-->
772 <policy-set combine="first-matching-target">
775 <subject-match attr="uri" match="buu.com.pl"/>
779 <rule effect="permit">
780 <condition combine="and">
781 <resource-match attr="resource-id" match="device:pim.contacts"/>
787 <policy-set combine="first-matching-target">
790 <subject-match attr="id" match="s18b"/>
791 <subject-match attr="uri" match="buu.s18b.pl"/>
795 <rule effect="permit">
796 <condition combine="and">
797 <resource-match attr="resource-id" match="device:pim.contacts"/>
803 <policy-set combine="first-matching-target">
806 <subject-match attr="id" match="s18c"/>
810 <rule effect="permit">
811 <condition combine="and">
812 <resource-match attr="resource-id" match="device:pim.contacts"/>
813 <subject-match attr="uri" match="buu.s18c.pl"/>
820 <!--- test 19 (old name: test 106)-->
821 <policy-set combine="first-matching-target">
824 <subject-match attr="id">s19.1</subject-match>
825 <subject-match attr="key-root-trust" match="voperator"/>
831 <resource-match attr="resource-id">
839 <policy-set combine="first-matching-target">
842 <subject-match attr="id">s19.2</subject-match>
843 <subject-match attr="key-root-trust" match="voperator"/>
847 <rule effect="permit">
849 <resource-match attr="resource-id">
859 <!--- test 20 (old name: test 107)-->
860 <policy-set combine="first-matching-target">
863 <subject-match attr="id">s20.1</subject-match>
864 <subject-match attr="signer-id" match="v7zha89%49x£$"/>
870 <resource-match attr="resource-id">
878 <policy-set combine="first-matching-target">
881 <subject-match attr="id">s20.2</subject-match>
882 <subject-match attr="signer-id" match="v7zha89%49x£$"/>
886 <rule effect="permit">
888 <resource-match attr="resource-id">
899 <!--- test 21 (old name: test 103 U)-->
900 <policy-set combine="first-matching-target">
903 <subject-match attr="id">s21</subject-match>
907 <rule effect="permit">
908 <condition combine="and">
909 <resource-match attr="resource-id" match="device:pim.contacts"/>
917 <!--- test 23 (old name: test 105 U)-->
918 <policy-set combine="first-matching-target">
921 <subject-match attr="id">s23</subject-match>
925 <rule effect="permit">
926 <condition combine="and">
927 <resource-match attr="resource-id" match="device:pim"/>
928 <subject-match attr="version" match="5"/>
937 <!--- test 24 (old name: test 106 U)-->
938 <policy-set combine="first-matching-target">
941 <subject-match attr="id">s24</subject-match>
945 <rule effect="permit">
946 <condition combine="or">
947 <subject-match attr="version" match="5"/>
948 <resource-match attr="resource-id" match="device:pim"/>
955 <!--- test 25.1 (old name: test 107 U)-->
956 <policy-set combine="first-matching-target">
959 <subject-match attr="id">s25.1</subject-match>
963 <rule effect="permit">
964 <condition combine="and">
965 <condition combine="and">
966 <resource-match attr="resource-id" match="device:pim.contacts"/>
967 <subject-match attr="version" match="5"/>
970 <condition combine="and">
971 <resource-match attr="resource-id" match="device:pim"/>
972 <subject-match attr="version" match="5"/>
982 <!--- test 25.2 (old name: test 107 a U -->
983 <policy-set combine="first-matching-target">
986 <subject-match attr="id">s25.2</subject-match>
990 <rule effect="permit">
991 <condition combine="and">
992 <condition combine="and">
993 <resource-match attr="resource-id" match="device:pim"/>
994 <subject-match attr="version" match="5"/>
997 <condition combine="and">
998 <resource-match attr="resource-id" match="device:pim.contacts"/>
999 <subject-match attr="version" match="5"/>
1010 <!--- test 25.3 (old name: test 107 b U -->
1011 <policy-set combine="first-matching-target">
1014 <subject-match attr="id">s25.3</subject-match>
1018 <rule effect="permit">
1019 <condition combine="and">
1020 <condition combine="or">
1021 <resource-match attr="resource-id" match="device:pim.contacts"/>
1022 <subject-match attr="version" match="5"/>
1025 <condition combine="and">
1026 <resource-match attr="resource-id" match="device:pim.contacts"/>
1027 <subject-match attr="version" match="5"/>
1037 <!--- test 25.4 (old name: test 107 c U -->
1038 <policy-set combine="first-matching-target">
1041 <subject-match attr="id">s25.4</subject-match>
1045 <rule effect="permit">
1046 <condition combine="and">
1047 <condition combine="and">
1048 <resource-match attr="resource-id" match="device:pim.contacts"/>
1049 <subject-match attr="version" match="5"/>
1052 <condition combine="or">
1053 <resource-match attr="resource-id" match="device:pim.contacts"/>
1054 <subject-match attr="version" match="5"/>
1067 <!--- test 26.1 (old name: test 108 U -->
1068 <policy-set combine="first-matching-target">
1071 <subject-match attr="id">s26.1</subject-match>
1075 <rule effect="permit">
1076 <condition combine="or">
1077 <condition combine="and">
1078 <resource-match attr="resource-id" match="device:pim"/>
1079 <subject-match attr="version" match="5"/>
1082 <condition combine="and">
1083 <resource-match attr="resource-id" match="device:pim.contacts"/>
1084 <subject-match attr="version" match="5"/>
1093 <!--- test 26.2 (old name: test 108 a U -->
1094 <policy-set combine="first-matching-target">
1097 <subject-match attr="id">s26.2</subject-match>
1101 <rule effect="permit">
1102 <condition combine="or">
1103 <condition combine="or">
1104 <resource-match attr="resource-id" match="device:pim.contacts"/>
1105 <subject-match attr="version" match="5"/>
1108 <condition combine="and">
1109 <resource-match attr="resource-id" match="device:pim.contacts"/>
1110 <subject-match attr="version" match="5"/>
1119 <!--- test 26.3 (old name: test 108 b U -->
1120 <policy-set combine="first-matching-target">
1123 <subject-match attr="id">s26.3</subject-match>
1127 <rule effect="permit">
1128 <condition combine="or">
1129 <condition combine="and">
1130 <resource-match attr="resource-id" match="device:pim.contacts"/>
1131 <subject-match attr="version" match="5"/>
1134 <condition combine="or">
1135 <resource-match attr="resource-id" match="device:pim.contacts"/>
1136 <subject-match attr="version" match="5"/>
1145 <!--- test 26.4 (old name: test 108 c U -->
1146 <policy-set combine="first-matching-target">
1149 <subject-match attr="id">s26.4</subject-match>
1153 <rule effect="permit">
1154 <condition combine="or">
1155 <condition combine="and">
1156 <resource-match attr="resource-id" match="device:pim.contacts"/>
1157 <subject-match attr="version" match="5"/>
1160 <condition combine="and">
1161 <resource-match attr="resource-id" match="device:pim"/>
1162 <subject-match attr="version" match="5"/>
1173 <!--- test 27.1 (old name: test 109 U -->
1174 <policy-set combine="first-matching-target">
1177 <subject-match attr="id">s27.1</subject-match>
1181 <rule effect="permit">
1182 <condition combine="or">
1183 <condition combine="or">
1184 <resource-match attr="resource-id" match="device:pim"/>
1185 <subject-match attr="version" match="5"/>
1188 <condition combine="or">
1189 <resource-match attr="resource-id" match="device:pim.contacts"/>
1190 <subject-match attr="version" match="5"/>
1198 <!--- test 27.2 (old name: test 109a U -->
1199 <policy-set combine="first-matching-target">
1202 <subject-match attr="id">s27.2</subject-match>
1206 <rule effect="permit">
1207 <condition combine="or">
1208 <condition combine="or">
1209 <resource-match attr="resource-id" match="device:pim"/>
1210 <subject-match attr="version" match="5"/>
1213 <condition combine="and">
1214 <resource-match attr="resource-id" match="device:pim"/>
1215 <subject-match attr="version" match="5"/>
1223 <!--- test 27.3 (old name: test 109b U -->
1224 <policy-set combine="first-matching-target">
1227 <subject-match attr="id">s27.3</subject-match>
1231 <rule effect="permit">
1232 <condition combine="or">
1233 <condition combine="and">
1234 <resource-match attr="resource-id" match="device:pim"/>
1235 <subject-match attr="version" match="5"/>
1238 <condition combine="or">
1239 <resource-match attr="resource-id" match="device:pim"/>
1240 <subject-match attr="version" match="5"/>
1250 <!--- test 27.4 (old name: test 109c U -->
1251 <policy-set combine="first-matching-target">
1254 <subject-match attr="id">s27.4</subject-match>
1258 <rule effect="permit">
1259 <condition combine="or">
1260 <condition combine="or">
1261 <resource-match attr="resource-id" match="device:pim.contacts"/>
1262 <subject-match attr="version" match="5"/>
1265 <condition combine="or">
1266 <resource-match attr="resource-id" match="device:pim"/>
1267 <subject-match attr="version" match="5"/>
1277 <!--- test 28 (old name: test 110 U -->
1278 <policy-set combine="first-matching-target">
1281 <subject-match attr="id">s28</subject-match>
1285 <rule effect="permit">
1286 <condition combine="or">
1287 <condition combine="and">
1288 <resource-match attr="resource-id" match="device:pim"/>
1289 <subject-match attr="version" match="5"/>
1292 <condition combine="or">
1293 <resource-match attr="resource-id" match="device:pim.contacts"/>
1294 <subject-match attr="version" match="5"/>
1303 <!--- test 29 (old name: test 111 U -->
1304 <policy-set combine="first-matching-target">
1307 <subject-match attr="id">s29</subject-match>
1311 <rule effect="permit">
1312 <condition combine="and">
1313 <condition combine="and">
1314 <resource-match attr="resource-id" match="device:pim"/>
1315 <subject-match attr="version" match="5"/>
1318 <condition combine="or">
1319 <resource-match attr="resource-id" match="device:pim.contacts"/>
1320 <subject-match attr="version" match="5"/>
1328 <!--- test 30.1 (old name: test 112 U -->
1329 <policy-set combine="first-matching-target">
1332 <subject-match attr="id">s30.1</subject-match>
1336 <rule effect="permit">
1337 <condition combine="and">
1338 <condition combine="and">
1339 <resource-match attr="resource-id" match="device:pim"/>
1340 <subject-match attr="version" match="5"/>
1343 <condition combine="or">
1344 <resource-match attr="resource-id" match="device:pim.contacts"/>
1345 <subject-match attr="version" match="5"/>
1353 <rule effect="deny">
1354 <condition combine="or">
1355 <condition combine="and">
1356 <resource-match attr="resource-id" match="device:pim.contacts"/>
1357 <subject-match attr="version" match="5"/>
1360 <condition combine="and">
1361 <resource-match attr="resource-id" match="device:pim"/>
1362 <subject-match attr="version" match="5"/>
1372 <!--- test 30.2 (old name: test 112a U -->
1373 <policy-set combine="first-matching-target">
1376 <subject-match attr="id">s30.2</subject-match>
1380 <rule effect="permit">
1381 <condition combine="or">
1382 <condition combine="and">
1383 <resource-match attr="resource-id" match="device:pim"/>
1384 <subject-match attr="version" match="5"/>
1387 <condition combine="or">
1388 <resource-match attr="resource-id" match="device:pim.contacts"/>
1389 <subject-match attr="version" match="5"/>
1397 <rule effect="deny">
1398 <condition combine="or">
1399 <condition combine="and">
1400 <resource-match attr="resource-id" match="device:pim.contacts"/>
1401 <subject-match attr="version" match="5"/>
1404 <condition combine="and">
1405 <resource-match attr="resource-id" match="device:pim"/>
1406 <subject-match attr="version" match="5"/>
1416 <!--- test 30.3 (old name: test 112b U -->
1417 <policy-set combine="first-matching-target">
1420 <subject-match attr="id">s30.3</subject-match>
1424 <rule effect="permit">
1425 <condition combine="or">
1426 <condition combine="and">
1427 <resource-match attr="resource-id" match="device:pim"/>
1428 <subject-match attr="version" match="5"/>
1431 <condition combine="and">
1432 <resource-match attr="resource-id" match="device:pim.contacts"/>
1433 <subject-match attr="version" match="5"/>
1441 <rule effect="deny">
1442 <condition combine="and">
1443 <condition combine="and">
1444 <resource-match attr="resource-id" match="device:pim.contacts"/>
1445 <subject-match attr="version" match="5"/>
1448 <condition combine="and">
1449 <resource-match attr="resource-id" match="device:pim"/>
1450 <subject-match attr="version" match="5"/>
1459 <!--- test 30.4 (old name: test 112c U -->
1460 <policy-set combine="first-matching-target">
1463 <subject-match attr="id">s30.4</subject-match>
1467 <rule effect="deny">
1468 <condition combine="or">
1469 <condition combine="and">
1470 <resource-match attr="resource-id" match="device:pim.contacts"/>
1471 <subject-match attr="version" match="5"/>
1474 <condition combine="and">
1475 <resource-match attr="resource-id" match="device:pim"/>
1476 <subject-match attr="version" match="5"/>
1485 <rule effect="permit">
1486 <condition combine="or">
1487 <condition combine="and">
1488 <resource-match attr="resource-id" match="device:pim"/>
1489 <subject-match attr="version" match="5"/>
1492 <condition combine="or">
1493 <resource-match attr="resource-id" match="device:pim.contacts"/>
1494 <subject-match attr="version" match="5"/>
1505 <!--- test 31.1 (old name: test 113 U -->
1506 <policy-set combine="deny-overrides">
1509 <subject-match attr="id">s31.1</subject-match>
1513 <rule effect="permit">
1514 <condition combine="and">
1515 <condition combine="or">
1516 <resource-match attr="resource-id" match="device:pim"/>
1517 <subject-match attr="version" match="5"/>
1520 <condition combine="and">
1521 <resource-match attr="resource-id" match="device:pim.contacts"/>
1522 <subject-match attr="version" match="5"/>
1530 <rule effect="deny">
1531 <condition combine="and">
1532 <condition combine="and">
1533 <resource-match attr="resource-id" match="device:pim"/>
1534 <subject-match attr="version" match="5"/>
1537 <condition combine="or">
1538 <resource-match attr="resource-id" match="device:pim.contacts"/>
1539 <subject-match attr="version" match="5"/>
1549 <!--- test 31.2.1 (old name: test 113a U -->
1550 <policy-set combine="deny-overrides">
1553 <subject-match attr="id">s31.2.1</subject-match>
1557 <rule effect="permit">
1558 <condition combine="and">
1559 <condition combine="or">
1560 <resource-match attr="resource-id" match="device:pim"/>
1561 <subject-match attr="version" match="5"/>
1564 <condition combine="and">
1565 <resource-match attr="resource-id" match="device:pim.contacts"/>
1566 <subject-match attr="version" match="5"/>
1574 <rule effect="deny">
1575 <condition combine="or">
1576 <condition combine="or">
1577 <resource-match attr="resource-id" match="device:pim"/>
1578 <subject-match attr="version" match="5"/>
1581 <condition combine="or">
1582 <resource-match attr="resource-id" match="device:pim.contacts"/>
1583 <subject-match attr="version" match="5"/>
1592 <!--- test 31.2.2 (old name: test 113aa U -->
1593 <policy-set combine="deny-overrides">
1596 <subject-match attr="id">s31.2.2</subject-match>
1600 <rule effect="permit">
1601 <condition combine="and">
1602 <condition combine="or">
1603 <resource-match attr="resource-id" match="device:pim"/>
1604 <subject-match attr="version" match="5"/>
1607 <condition combine="and">
1608 <resource-match attr="resource-id" match="device:pim.contacts"/>
1609 <subject-match attr="version" match="5"/>
1617 <rule effect="permit">
1618 <condition combine="or">
1619 <condition combine="or">
1620 <resource-match attr="resource-id" match="device:pim"/>
1621 <subject-match attr="version" match="5"/>
1624 <condition combine="or">
1625 <resource-match attr="resource-id" match="device:pim.contacts"/>
1626 <subject-match attr="version" match="5"/>
1635 <!--- test 31.3 (old name: test 113b U -->
1636 <policy-set combine="deny-overrides">
1639 <subject-match attr="id">s31.3</subject-match>
1645 <rule effect="permit">
1646 <condition combine="and">
1647 <condition combine="or">
1648 <resource-match attr="resource-id" match="device:pim"/>
1649 <subject-match attr="version" match="5"/>
1652 <condition combine="and">
1653 <resource-match attr="resource-id" match="device:pim"/>
1654 <subject-match attr="version" match="5"/>
1662 <rule effect="permit">
1663 <condition combine="and">
1664 <condition combine="or">
1665 <resource-match attr="resource-id" match="device:pim"/>
1666 <subject-match attr="version" match="5"/>
1669 <condition combine="and">
1670 <resource-match attr="resource-id" match="device:pim.contacts"/>
1671 <subject-match attr="version" match="5"/>
1680 <!--- test 32.1 (old name: test 114 U -->
1681 <policy-set combine="permit-overrides">
1684 <subject-match attr="id">s32.1</subject-match>
1688 <rule effect="permit">
1689 <condition combine="and">
1690 <condition combine="and">
1691 <resource-match attr="resource-id" match="device:pim"/>
1692 <subject-match attr="version" match="5"/>
1695 <condition combine="or">
1696 <resource-match attr="resource-id" match="device:pim.contacts"/>
1697 <subject-match attr="version" match="5"/>
1705 <rule effect="deny">
1706 <condition combine="or">
1707 <condition combine="and">
1708 <resource-match attr="resource-id" match="device:pim"/>
1709 <subject-match attr="version" match="5"/>
1712 <condition combine="and">
1713 <resource-match attr="resource-id" match="device:pim.contacts"/>
1714 <subject-match attr="version" match="5"/>
1723 <!--- test 32.2.1 (old name: test 114a U -->
1724 <policy-set combine="permit-overrides">
1727 <subject-match attr="id">s32.2.1</subject-match>
1731 <rule effect="permit">
1732 <condition combine="or">
1733 <condition combine="and">
1734 <resource-match attr="resource-id" match="device:pim"/>
1735 <subject-match attr="version" match="5"/>
1738 <condition combine="or">
1739 <resource-match attr="resource-id" match="device:pim.contacts"/>
1740 <subject-match attr="version" match="5"/>
1748 <rule effect="deny">
1749 <condition combine="or">
1750 <condition combine="and">
1751 <resource-match attr="resource-id" match="device:pim"/>
1752 <subject-match attr="version" match="5"/>
1755 <condition combine="and">
1756 <resource-match attr="resource-id" match="device:pim.contacts"/>
1757 <subject-match attr="version" match="5"/>
1765 <!--- test 32.2.2 (old name: test 114aa U -->
1766 <policy-set combine="permit-overrides">
1769 <subject-match attr="id">s32.2.2</subject-match>
1773 <rule effect="deny">
1774 <condition combine="or">
1775 <condition combine="and">
1776 <resource-match attr="resource-id" match="device:pim"/>
1777 <subject-match attr="version" match="5"/>
1780 <condition combine="or">
1781 <resource-match attr="resource-id" match="device:pim.contacts"/>
1782 <subject-match attr="version" match="5"/>
1790 <rule effect="deny">
1791 <condition combine="or">
1792 <condition combine="and">
1793 <resource-match attr="resource-id" match="device:pim"/>
1794 <subject-match attr="version" match="5"/>
1797 <condition combine="and">
1798 <resource-match attr="resource-id" match="device:pim.contacts"/>
1799 <subject-match attr="version" match="5"/>
1807 <!--- test 32.3 (old name: test 114b U -->
1808 <policy-set combine="permit-overrides">
1811 <subject-match attr="id">s32.3</subject-match>
1815 <rule effect="deny">
1816 <condition combine="or">
1817 <condition combine="and">
1818 <resource-match attr="resource-id" match="device:pim"/>
1819 <subject-match attr="version" match="5"/>
1822 <condition combine="or">
1823 <resource-match attr="resource-id" match="device"/>
1824 <subject-match attr="version" match="5"/>
1832 <rule effect="deny">
1833 <condition combine="and">
1834 <condition combine="and">
1835 <resource-match attr="resource-id" match="device:pim"/>
1836 <subject-match attr="version" match="5"/>
1839 <condition combine="and">
1840 <resource-match attr="resource-id" match="device:pim.contacts"/>
1841 <subject-match attr="version" match="5"/>
1850 <!--- test 33.1 (old name: test 115 U -->
1851 <policy-set combine="first-matching-target">
1854 <subject-match attr="id">s33.1</subject-match>
1857 <policy combine="first-applicable">
1858 <rule effect="permit">
1859 <condition combine="and">
1860 <resource-match attr="resource-id" match="device:pim"/>
1861 <subject-match attr="version" match="5"/>
1865 <rule effect="permit">
1866 <condition combine="and">
1867 <resource-match attr="resource-id" match="device:pim.contacts"/>
1868 <subject-match attr="version" match="5"/>
1876 <!--- test 33.2 (old name: test 115a U -->
1877 <policy-set combine="first-matching-target">
1880 <subject-match attr="id">s33.2</subject-match>
1883 <policy combine="first-applicable">
1884 <rule effect="permit">
1885 <condition combine="or">
1886 <resource-match attr="resource-id" match="device:pim.contacts"/>
1887 <subject-match attr="version" match="5"/>
1891 <rule effect="permit">
1892 <condition combine="and">
1893 <resource-match attr="resource-id" match="device:pim.contacts"/>
1894 <subject-match attr="version" match="5"/>
1902 <!--- test 33.3 (old name: test 115b U -->
1903 <policy-set combine="first-matching-target">
1906 <subject-match attr="id">s33.3</subject-match>
1909 <policy combine="first-applicable">
1910 <rule effect="permit">
1911 <condition combine="and">
1912 <resource-match attr="resource-id" match="device:pim"/>
1913 <subject-match attr="version" match="5"/>
1917 <rule effect="permit">
1918 <condition combine="or">
1919 <resource-match attr="resource-id" match="device:pim.contacts"/>
1920 <subject-match attr="version" match="5"/>
1928 <!--- test 34.1 (old name: test 116 U -->
1929 <policy-set combine="first-matching-target">
1932 <subject-match attr="id">s34.1</subject-match>
1935 <policy combine="permit-overrides">
1936 <rule effect="permit">
1937 <condition combine="and">
1938 <resource-match attr="resource-id" match="device:pim"/>
1939 <subject-match attr="version" match="5"/>
1942 <rule effect="permit">
1943 <condition combine="and">
1944 <resource-match attr="resource-id" match="device:pim.contacts"/>
1945 <subject-match attr="version" match="5"/>
1952 <!--- test 34.2 (old name: test 116 a U -->
1953 <policy-set combine="first-matching-target">
1956 <subject-match attr="id">s34.2</subject-match>
1959 <policy combine="permit-overrides">
1960 <rule effect="permit">
1961 <condition combine="and">
1962 <resource-match attr="resource-id" match="device:pim.contacts"/>
1963 <subject-match attr="version" match="5"/>
1966 <rule effect="permit">
1967 <condition combine="and">
1968 <resource-match attr="resource-id" match="device:pim"/>
1969 <subject-match attr="version" match="5"/>
1978 <!--- test 35.1 (old name: test 117 U -->
1979 <policy-set combine="first-matching-target">
1982 <subject-match attr="id">s35.1</subject-match>
1985 <policy combine="deny-overrides">
1986 <rule effect="permit">
1987 <condition combine="and">
1988 <resource-match attr="resource-id" match="device:pim"/>
1989 <subject-match attr="version" match="5"/>
1993 <rule effect="permit">
1994 <condition combine="and">
1995 <resource-match attr="resource-id" match="device:pim.contacts"/>
1996 <subject-match attr="version" match="5"/>
2004 <!--- test 35.2 (old name: test 117 a U -->
2005 <policy-set combine="first-matching-target">
2008 <subject-match attr="id">s35.2</subject-match>
2011 <policy combine="deny-overrides">
2012 <rule effect="deny">
2013 <condition combine="and">
2014 <resource-match attr="resource-id" match="device:pim.contacts"/>
2015 <subject-match attr="version" match="5"/>
2019 <rule effect="permit">
2020 <condition combine="and">
2021 <resource-match attr="resource-id" match="device"/>
2022 <subject-match attr="version" match="5"/>
2032 <subject-match attr="id">org.tizen.widget.analogclock</subject-match>
2035 <policy combine="first-applicable">
2036 <rule effect="permit">
2037 <condition combine="and">
2038 <resource-match attr="resource-id" match="http://helloheloo/"/>
2045 <!--- test 36 (old name: test 102 U -->
2046 <policy-set combine="first-matching-target">
2049 <subject-match attr="id">s36</subject-match>
2050 <subject-match attr="version" match="5"/>
2054 <rule effect="permit">
2055 <condition combine="and">
2056 <resource-match attr="resource-id" match="device:pim.contacts"/>
2057 <subject-match attr="version" match="5"/>
2066 <!--- test 37 (old name: test 108 -->
2067 <!-- mbialota modified -->
2069 <policy-set combine="first-matching-target">
2072 <subject-match attr="id">s37</subject-match>
2076 <rule effect="prompt-oneshot">
2077 <condition combine="and">
2078 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
2085 <!--- test 38 (old name: test 109 -->
2086 <!-- mbialota modified -->
2088 <policy-set combine="first-matching-target">
2091 <subject-match attr="id">s38</subject-match>
2095 <rule effect="prompt-session">
2096 <condition combine="and">
2097 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
2103 <policy-set combine="first-matching-target">
2106 <subject-match attr="id">s38.4</subject-match>
2110 <rule effect="prompt-session">
2111 <condition combine="and">
2112 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
2118 <!--- test 39 (old name: test 110 -->
2119 <!-- mbialota modified -->
2121 <policy-set combine="first-matching-target">
2124 <subject-match attr="id">s39</subject-match>
2128 <rule effect="prompt-blanket">
2129 <condition combine="and">
2130 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
2136 <policy-set combine="first-matching-target">
2139 <subject-match attr="id">s39.4</subject-match>
2143 <rule effect="prompt-blanket">
2144 <condition combine="and">
2145 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
2153 <!-- testing different methods of policies and rules combining-->
2154 <!--- test 40 (old name: test 200 -->
2156 <!--- two opposite rules put into different policies in one policy set -->
2157 <policy-set combine="first-matching-target">
2160 <subject-match attr="id">s40</subject-match>
2164 <rule effect="permit">
2165 <condition combine="and">
2166 <resource-match attr="resource-id">r40</resource-match>
2171 <rule effect="deny">
2172 <condition combine="and">
2173 <resource-match attr="resource-id">r40</resource-match>
2179 <!--- test 41 (old name: test 201 -->
2181 <!--- two different rules put into different policies in one policy set-->
2182 <policy-set combine="first-matching-target">
2185 <subject-match attr="id">s41</subject-match>
2189 <rule effect="permit">
2190 <condition combine="and">
2191 <resource-match attr="resource-id">r41</resource-match>
2194 <rule effect="deny">
2195 <condition combine="and">
2196 <resource-match attr="resource-id">r41.2</resource-match>
2202 <!--- test 42.1 (old name: test 202 -->
2203 <!--- two opposite rules put into one policy in one policy set-->
2204 <!--- this case will have the result of deny because of default rules combining==deny override, which is not the same as policies combining -->
2206 <policy-set combine="first-matching-target">
2209 <subject-match attr="id">s42.1</subject-match>
2213 <rule effect="permit">
2214 <condition combine="and">
2215 <resource-match attr="resource-id">r42.1</resource-match>
2218 <rule effect="deny">
2219 <condition combine="and">
2220 <resource-match attr="resource-id">r42.1</resource-match>
2226 <!--- test 42.2 (old name: test 202b -->
2227 <!--- two opposite rules put into one policy in one policy set-->
2228 <!--- this case will have the result of deny because of default rules combining==deny override, which is not the same as policies combining -->
2230 <policy-set combine="first-matching-target">
2233 <subject-match attr="id">s42.2</subject-match>
2237 <rule effect="deny">
2238 <condition combine="and">
2239 <resource-match attr="resource-id">r42.2</resource-match>
2242 <rule effect="permit">
2243 <condition combine="and">
2244 <resource-match attr="resource-id">r42.2</resource-match>
2250 <!--- test 43.1 (old name: test 203 -->
2252 <!--- two opposite rules put into different policies in one policy set-->
2253 <policy-set combine="deny-overrides">
2256 <subject-match attr="id">s43.1</subject-match>
2260 <rule effect="permit">
2261 <condition combine="and">
2262 <resource-match attr="resource-id">r43.1</resource-match>
2267 <rule effect="deny">
2268 <condition combine="and">
2269 <resource-match attr="resource-id">r43.1</resource-match>
2274 <!--- test 43.2 (old name: test 203b -->
2276 <!--- two opposite rules put into different policies in one policy set-->
2277 <policy-set combine="deny-overrides">
2280 <subject-match attr="id">s43.2</subject-match>
2284 <rule effect="deny">
2285 <condition combine="and">
2286 <resource-match attr="resource-id">r43.2</resource-match>
2291 <rule effect="permit">
2292 <condition combine="and">
2293 <resource-match attr="resource-id">r43.2</resource-match>
2299 <!--- test 44.1 (old name: test 204 -->
2300 <!--- two different rules put into different policies in one policy set-->
2301 <policy-set combine="permit-overrides">
2304 <subject-match attr="id">s44.1</subject-match>
2308 <rule effect="permit">
2309 <condition combine="and">
2310 <resource-match attr="resource-id">r44.1</resource-match>
2315 <rule effect="deny">
2316 <condition combine="and">
2317 <resource-match attr="resource-id">r44.1</resource-match>
2323 <!--- test 44.2 (old name: test 204b -->
2324 <!--- two different rules put into different policies in one policy set-->
2325 <policy-set combine="permit-overrides">
2328 <subject-match attr="id">s44.2</subject-match>
2332 <rule effect="deny">
2333 <condition combine="and">
2334 <resource-match attr="resource-id">r44.2</resource-match>
2339 <rule effect="permit">
2340 <condition combine="and">
2341 <resource-match attr="resource-id">r44.2</resource-match>
2347 <!--- test 45.1 (old name: test 205 -->
2348 <!--- two opposite rules put into one policy -->
2349 <!--- testing rules combining methods-->
2350 <!--- this case should have the result of permit in contradiction to test 202 -->
2351 <policy-set combine="first-matching-target">
2354 <subject-match attr="id">s45.1</subject-match>
2357 <policy combine="first-applicable">
2358 <rule effect="permit">
2359 <condition combine="and">
2360 <resource-match attr="resource-id">r45.1</resource-match>
2363 <rule effect="deny">
2364 <condition combine="and">
2365 <resource-match attr="resource-id">r45.1</resource-match>
2370 <!--- test 45.2 (old name: test 205b -->
2371 <!--- two opposite rules put into one policy -->
2372 <!--- testing rules combining methods-->
2373 <!--- this case should have the result of deny-->
2374 <policy-set combine="first-matching-target">
2377 <subject-match attr="id">s45.2</subject-match>
2380 <policy combine="first-applicable">
2381 <rule effect="deny">
2382 <condition combine="and">
2383 <resource-match attr="resource-id">r45.2</resource-match>
2386 <rule effect="permit">
2387 <condition combine="and">
2388 <resource-match attr="resource-id">r45.2</resource-match>
2394 <!--- test 46.1 (old name: test 206 -->
2395 <!--- two opposite rules put into one policy -->
2398 <policy-set combine="first-matching-target">
2401 <subject-match attr="id">s46.1</subject-match>
2404 <policy combine="permit-overrides">
2405 <rule effect="deny">
2406 <condition combine="and">
2407 <resource-match attr="resource-id">r46.1</resource-match>
2410 <rule effect="permit">
2411 <condition combine="and">
2412 <resource-match attr="resource-id">r46.1</resource-match>
2417 <!--- test 46.2 (old name: test 206b -->
2418 <!--- two opposite rules put into one policy -->
2421 <policy-set combine="first-matching-target">
2424 <subject-match attr="id">s46.2</subject-match>
2427 <policy combine="permit-overrides">
2428 <rule effect="permit">
2429 <condition combine="and">
2430 <resource-match attr="resource-id">r46.2</resource-match>
2433 <rule effect="deny">
2434 <condition combine="and">
2435 <resource-match attr="resource-id">r46.2</resource-match>
2441 <!--- test 47.1 (old name: test 207 -->
2442 <!--- two opposite rules put into one policy -->
2445 <policy-set combine="first-matching-target">
2448 <subject-match attr="id">s47.1</subject-match>
2451 <policy combine="deny-overrides">
2452 <rule effect="permit">
2453 <condition combine="and">
2454 <resource-match attr="resource-id">r47.1</resource-match>
2457 <rule effect="deny">
2458 <condition combine="and">
2459 <resource-match attr="resource-id">r47.1</resource-match>
2464 <!--- test 47.2 (old name: test 207b -->
2465 <!--- two opposite rules put into one policy -->
2467 <policy-set combine="first-matching-target">
2470 <subject-match attr="id">s47.2</subject-match>
2473 <policy combine="deny-overrides">
2474 <rule effect="deny">
2475 <condition combine="and">
2476 <resource-match attr="resource-id">r47.2</resource-match>
2479 <rule effect="permit">
2480 <condition combine="and">
2481 <resource-match attr="resource-id">r47.2</resource-match>
2488 <!--- test 48 (old name: test 101)-->
2490 <policy-set combine="first-matching-target">
2493 <subject-match attr="id">s48</subject-match>
2494 <subject-match attr="uri.host" match="www.test.pl"/>
2499 <rule effect="permit">
2500 <condition combine="and">
2501 <resource-match attr="resource-id" match="device:pim.contacts"/>
2502 <!--<subject-match attr="uri" match="http://www.test.pl:80"/>-->