tests/ace/test-configuration/attr_policy-example8.xml

   1 <policy-set id="Policy-3" combine="deny-overrides">
   2     <target>
   3         <subject>
   4             <subject-match attr="id" match="subject7" func="regexp" />
   5         </subject>
   6     </target>
   7     <policy>
   8         <rule effect="permit">
   9             <condition combine="and">
  10                 <resource-match attr="resource-id">
  11                     resource7
  12                 </resource-match>
  13                 <condition combine="and">
  14                     <condition combine="or">
  15                         <subject-match attr="version" match="7" func="equal" />
  16                         <subject-match attr="version" match="6" />
  17                     </condition>
  18                     <resource-match attr="author" match="author2" />
  19                 </condition>
  20             </condition>
  21         </rule>
  22     </policy>
  23     <policy>
  24         <rule effect="permit">
  25             <condition combine="and">
  26                 <resource-match attr="resource-id">
  27                     resource7
  28                 </resource-match>
  29                 <condition combine="or">
  30                     <condition combine="or">
  31                         <subject-match attr="version" match="1" />
  32                         <subject-match attr="version" match="2" />
  33                     </condition>
  34                     <resource-match attr="author" match="author3"  func="regexp"/>
  35                 </condition>
  36             </condition>
  37         </rule>
  38     </policy>
  39     <policy>
  40         <rule effect="deny">
  41             <condition combine="and">
  42                 <resource-match attr="resource-id">
  43                     resource7
  44                 </resource-match>
  45                 <condition combine="or">
  46                     <condition combine="or">
  47                         <subject-match attr="version" match="1" />
  48                         <subject-match attr="version" match="2" />
  49                     </condition>
  50                     <resource-match attr="author" match="author3" />
  51                 </condition>
  52             </condition>
  53         </rule>
  54     </policy>
  55  </policy-set>