projects / framework / web / wrt-commons.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
history | raw | HEAD
Tizen 2.1 base
[framework/web/wrt-commons.git] / tests / ace / test-configuration / policy_example.xml
1 <policy-set id="Policy-1">      
2 <policy-set combine="first-matching-target">
3     <target>
4         <subject>
5             <subject-match attr="id">
6                 subject
7             </subject-match>
8         </subject>
9         <subject>
10             <subject-match attr="id" match="subject2" />
11         </subject>
12     </target>
13     <policy>
14         <target>
15             <subject>
16                 <subject-match attr="id" match="subject" />
17             </subject>
18         </target>
19         <rule effect="permit">
20             <condition>
21                 <resource-match attr="resource-id">
22                     resource
23                 </resource-match>
24                 <subject-match attr="version" match="3" />
25             </condition>
26         </rule>
27     </policy>        
28     <policy>
29         <target>
30             <subject>
31                 <subject-match attr="id" match="subject2" />
32             </subject>
33         </target>
34         <rule effect="deny">
35             <condition>
36                 <resource-match attr="resource-id">
37                     resource
38                 </resource-match>                    
39             </condition>
40         </rule>
41     </policy>    
42 </policy-set>
43 <policy-set >
44     <target>
45         <subject>
46             <subject-match attr="id">
47                 subject3
48             </subject-match>                    
49         </subject>  
50         <subject>
51             <subject-match attr="id" match="subject4" />
52         </subject>                 
53     </target>
54     <policy>             
55         <rule effect="permit">
56             <condition>
57                 <resource-match attr="resource-id">
58                     resource2
59                 </resource-match>                
60             </condition>
61         </rule>
62     </policy>        
63     <policy>            
64         <rule effect="deny">
65             <condition>
66                 <resource-match attr="resource-id">
67                     resource2
68                 </resource-match>                    
69             </condition>
70         </rule>
71     </policy> 
72     <policy>
73         <target>
74             <subject>
75                 <subject-match attr="id">
76                     subject4
77                 </subject-match>                    
78                 <subject-match attr="version" match="4" />
79             </subject>  
80         </target>
81         <rule effect="permit">
82             <condition>
83                 <resource-match attr="resource-id">
84                     resource4
85                 </resource-match>                    
86             </condition>
87         </rule>
88     </policy>
89 </policy-set>    
90 <policy-set id="Policy-2" combine="first-matching-target">
91     <target>      
92         <subject>
93             <subject-match attr="id" match="subject5" />
94         </subject>                 
95         <subject>
96             <subject-match attr="id" match="subject6" />
97         </subject>                 
98     </target>
99     <policy>    
100         <target>
101             <subject>
102                 <subject-match attr="id">
103                     subject5
104                 </subject-match>                    
105             </subject>              
106         </target>
107         <rule effect="permit">
108             <condition combine="and">
109                 <resource-match attr="resource-id">
110                     resource5
111                 </resource-match>                
112                 <subject-match attr="version" match="5" />
113             </condition>
114         </rule>
115     </policy> 
116     <policy>             
117         <rule effect="permit">
118             <condition combine="or">
119                 <resource-match attr="resource-id">
120                     resource6
121                 </resource-match>                
122                 <subject-match attr="version" match="6" />
123             </condition>
124         </rule>
125     </policy>  
126 </policy-set>
127
128 <policy-set id="Policy-3" combine="deny-overrides">
129     <target>      
130         <subject>
131             <subject-match attr="id" match="subject7" />
132         </subject>                                 
133     </target>
134     <policy>   
135         <rule effect="permit">
136             <condition combine="and">
137                 <resource-match attr="resource-id">
138                     resource7
139                 </resource-match>    
140                 <condition combine="and">
141                     <condition combine="or">
142                         <subject-match attr="version" match="7" />
143                         <subject-match attr="version" match="6" />
144                     </condition>
145                     <resource-match attr="author" match="author2" />
146                 </condition>
147             </condition>
148         </rule>
149     </policy>   
150     <policy>   
151         <rule effect="permit">
152             <condition combine="and">
153                 <resource-match attr="resource-id">
154                     resource7
155                 </resource-match>    
156                 <condition combine="or">
157                     <condition combine="or">
158                         <subject-match attr="version" match="1" />
159                         <subject-match attr="version" match="2" />
160                     </condition>
161                     <resource-match attr="author" match="author3" />
162                 </condition>
163             </condition>
164         </rule>
165     </policy> 
166     <policy>   
167         <rule effect="deny">
168             <condition combine="and">
169                 <resource-match attr="resource-id">
170                     resource7
171                 </resource-match>    
172                 <condition combine="or">
173                     <condition combine="or">
174                         <subject-match attr="version" match="1" />
175                         <subject-match attr="version" match="2" />
176                     </condition>
177                     <resource-match attr="author" match="author3" />
178                 </condition>
179             </condition>
180         </rule>
181     </policy> 
182  </policy-set>
183
184 <policy-set id="Policy-4" combine="first-matching-target">
185         <target>
186                 <subject>
187                         <subject-match attr="id">s8a</subject-match>
188                 </subject>  
189         </target>
190         <policy>
191                 <rule effect="permit">
192                         <condition combine="and">
193                                 <resource-match attr="resource-id">r8</resource-match>    
194                                 <resource-match attr="r8v1" match="1" />
195                         </condition>
196         </rule>
197         </policy>
198         <policy>
199                 <rule effect="deny">
200                         <condition combine="and">
201                                 <resource-match attr="resource-id">r8</resource-match>    
202                                 <resource-match attr="r8v2" match="2" />
203                         </condition>
204         </rule>
205         </policy>
206 </policy-set>
207
208 <policy-set id="Policy-5" combine="first-matching-target">
209         <target>
210                 <subject>
211                         <subject-match attr="id">s8b</subject-match>
212                 </subject>  
213         </target>
214         <policy>
215                 <rule effect="deny">
216                         <condition combine="and">
217                                 <resource-match attr="resource-id">r8</resource-match>    
218                                 <resource-match attr="r8v2" match="2" />
219                         </condition>
220         </rule>
221         </policy>
222         <policy>
223                 <rule effect="permit">
224                         <condition combine="and">
225                                 <resource-match attr="resource-id">r8</resource-match>    
226                                 <resource-match attr="r8v1" match="1" />
227                         </condition>
228         </rule>
229     </policy>
230 </policy-set>
231
232 <policy-set id="Policy-6" combine="first-matching-target">
233         <target>
234                 <subject>
235                         <subject-match attr="id">s8c</subject-match>
236                 </subject>  
237         </target>
238         <policy>
239                 <rule effect="permit">
240                         <condition combine="and">
241                                 <resource-match attr="resource-id">r8</resource-match>
242                                 <resource-match attr="r8v1" match="1" />
243                                 <resource-match attr="r8v2" match="1" />
244                         </condition>
245         </rule>
246     </policy>
247         <policy>
248                 <rule effect="deny" />
249         </policy> 
250 </policy-set>
251
252 <policy-set id="Policy-7" combine="first-matching-target">
253         <target>
254                 <subject>
255                         <subject-match attr="id">s9a</subject-match>
256                 </subject>  
257         </target>
258         <policy>
259                 <rule effect="permit">
260                         <condition combine="and">
261                                 <resource-match attr="resource-id">r9</resource-match>    
262                                 <resource-match attr="r9a.scheme" match="http://onet.pl:80/test.html" />
263                         </condition>
264         </rule>
265         </policy>
266         <policy>
267                 <rule effect="deny">
268                         <condition combine="and">
269                                 <resource-match attr="resource-id">r9</resource-match>
270                                 <resource-match attr="r9a" match="*" func="glob"/>
271                         </condition>
272         </rule>
273     </policy>  
274 </policy-set>
275
276 <policy-set id="Policy-8" combine="first-matching-target">
277         <target>
278                 <subject>
279                         <subject-match attr="id">s9b</subject-match>
280                 </subject>  
281         </target>
282         <policy>
283                 <rule effect="deny">
284                         <condition combine="and">
285                                 <resource-match attr="resource-id">r9</resource-match>    
286                                 <resource-match attr="r9b.authority" match="http://onet.pl:80/test.html" />
287                         </condition>
288         </rule>
289         </policy>
290         <policy>
291                 <rule effect="permit">
292                         <condition combine="and">
293                                 <resource-match attr="resource-id">r9</resource-match>    
294                                 <resource-match attr="r9b" match="777" func="equal" />
295                         </condition>
296         </rule>
297     </policy>
298 </policy-set>
299
300 <policy-set  id="Policy-9"  combine="first-matching-target">
301         <target>
302                 <subject>
303                         <subject-match attr="id">s9c</subject-match>
304         </subject>  
305         </target>
306         <policy>
307                 <rule effect="deny">
308                         <condition combine="and">
309                                 <resource-match attr="resource-id">r9</resource-match>  
310                                 <resource-match attr="r9c.scheme" match="http" />
311                         </condition>
312         </rule>
313         </policy>
314
315         <policy>
316                 <rule effect="deny">
317                         <condition combine="and">
318                                 <resource-match attr="resource-id">r9</resource-match>    
319                                 <resource-match attr="r9c.authority" match="onet.pl" />
320                         </condition>
321         </rule>
322         </policy>
323
324         <policy>
325                 <rule effect="permit">
326                         <condition combine="and">
327                                 <resource-match attr="resource-id">r9</resource-match>    
328                                 <resource-match attr="r9c.scheme-authority" match="http://onet.pl" />
329                         </condition>
330         </rule>
331         </policy>
332         <policy>
333                 <rule effect="deny">
334                         <condition combine="and">
335                                 <resource-match attr="resource-id">r9</resource-match>    
336                                 <resource-match attr="r9c" match="*" func="glob" />
337                         </condition>
338         </rule>
339     </policy>
340 </policy-set>
341
342 <policy-set  id="Policy-10" combine="first-matching-target">
343         <target>
344                 <subject>
345                         <subject-match attr="id">s9d</subject-match>
346         </subject>  
347     </target>
348         <policy>
349                 <rule effect="deny">
350                         <condition combine="and">
351                                 <resource-match attr="resource-id">r9</resource-match>    
352                                 <resource-match attr="r9d.scheme" match="http://onet.pl:80/test.html" />
353                         </condition>
354         </rule>
355         </policy>
356         <policy>
357                 <rule effect="deny">
358                         <condition combine="and">
359                                 <resource-match attr="resource-id">r9</resource-match>    
360                                 <resource-match attr="r9d.authority" match="http://onet.pl:80/test.html" />
361                         </condition>
362         </rule>
363         </policy>
364         <policy>
365                 <rule effect="deny">
366                         <condition combine="and">
367                                 <resource-match attr="resource-id">r9</resource-match>    
368                                 <resource-match attr="r9d" match="*" func="glob" />
369                         </condition>
370         </rule>
371         </policy>
372         <policy>
373                 <rule effect="permit">
374                         <condition combine="and">
375                                 <resource-match attr="resource-id">r9</resource-match>    
376                                 <resource-match attr="r9d.scheme-authority" match="http://onet.pl:80/test.html" />
377                         </condition>
378         </rule>
379     </policy>
380 </policy-set>
381
382 <policy-set id="Policy-11" combine="first-matching-target">
383         <target>
384                 <subject>
385                         <subject-match attr="id">s9e</subject-match>
386         </subject>  
387     </target>
388         <policy>
389                 <rule effect="deny">
390                         <condition combine="and">
391                                 <resource-match attr="resource-id">r9</resource-match>    
392                                 <resource-match attr="r9e.host" match="http://onet.pl:80/test.html" />
393                         </condition>
394         </rule>
395         </policy>
396         <policy>
397                 <rule effect="permit">
398                         <condition combine="and">
399                                 <resource-match attr="resource-id">r9</resource-match>    
400                                 <resource-match attr="r9e" match="*" func="glob"/>
401                         </condition>
402         </rule>
403     </policy>
404 </policy-set>
405
406 <policy-set  id="Policy-12" combine="first-matching-target">
407         <target>
408                 <subject>
409                         <subject-match attr="id">s9f</subject-match>
410                 </subject>  
411         </target>
412         <policy>
413                 <rule effect="permit">
414                         <condition combine="and">
415                                 <resource-match attr="resource-id">r9</resource-match>    
416                                 <resource-match attr="r9e.host" match="http://onet.pl:80/test.html" />
417                         </condition>
418         </rule>
419         </policy>
420         <policy>
421                 <rule effect="deny">
422                         <condition combine="and">
423                                 <resource-match attr="resource-id">r9</resource-match>    
424                                 <resource-match attr="r9e" match="*" func="glob"/>
425                         </condition>
426         </rule>
427     </policy>
428 </policy-set>
429
430 <policy-set id="Policy-13" combine="first-matching-target">
431         <target>
432                 <subject>
433                         <subject-match attr="id">s9g</subject-match>
434                 </subject>  
435         </target>
436         <policy>
437                 <rule effect="deny">
438                         <condition combine="and">
439                                 <resource-match attr="resource-id">r9</resource-match>    
440                                 <resource-match attr="r9g.path" match="http://onet.pl:80/test.html" />
441                         </condition>
442         </rule>
443         </policy>
444         <policy>
445                 <rule effect="permit">
446                         <condition combine="and">
447                                 <resource-match attr="resource-id">r9</resource-match>    
448                                 <resource-match attr="r9g" match="*" func="glob"/>
449                         </condition>
450         </rule>
451     </policy>
452 </policy-set>
453
454 <policy-set  id="Policy-14" combine="first-matching-target">
455         <target>
456                 <subject>
457                         <subject-match attr="id">s9h</subject-match>
458         </subject>  
459         </target>
460         <policy>
461                 <rule effect="permit">
462                         <condition combine="and">
463                                 <resource-match attr="resource-id">r9</resource-match>    
464                                 <resource-match attr="r9g.path" match="http://onet.pl:80/test.html" />
465                         </condition>
466         </rule>
467         </policy>
468         <policy>
469                 <rule effect="deny">
470                         <condition combine="and">
471                                 <resource-match attr="resource-id">r9</resource-match>    
472                                 <resource-match attr="r9g" match="*" func="glob"/>
473                         </condition>
474         </rule>
475     </policy>
476 </policy-set>
477
478 <policy-set id="Policy-15" combine="first-matching-target">
479         <target>
480                 <subject>
481                         <subject-match attr="id">s10a</subject-match>
482                 </subject>  
483         </target>
484         <policy>
485                 <rule effect="permit">
486                         <condition combine="and">
487                                 <resource-match attr="resource-id">r10</resource-match>    
488                                 <resource-match attr="r10a" match="[1234567890]+[ab]+" func="regexp" />
489                         </condition>
490         </rule>
491         </policy>
492         <policy>
493                 <rule effect="deny">
494                         <condition combine="and">
495                                 <resource-match attr="resource-id">r10</resource-match>
496                                 <resource-match attr="r10a" match="*" func="glob"/>
497                         </condition>
498         </rule>
499     </policy>
500 </policy-set>
501
502 <policy-set id="Policy-16" combine="first-matching-target">
503         <target>
504                 <subject>
505                         <subject-match attr="id">s10b</subject-match>
506         </subject>  
507     </target>
508         <policy>
509                 <rule effect="deny">
510                         <condition combine="and">
511                                 <resource-match attr="resource-id">r10</resource-match>    
512                                 <resource-match attr="r10a" match="[1234567890]+[ab]+" func="regexp" />
513                         </condition>
514         </rule>
515         </policy>
516         <policy>
517                 <rule effect="permit">
518                         <condition combine="and">
519                                 <resource-match attr="resource-id">r10</resource-match>
520                                 <resource-match attr="r10a" match="*" func="glob"/>
521                         </condition>
522         </rule>
523     </policy>  
524 </policy-set>
525
526 <policy-set id="Policy-17" combine="first-matching-target">
527         <target>
528                 <subject>
529                         <subject-match attr="id">s10c</subject-match>
530         </subject>  
531     </target>
532         <policy>
533                 <rule effect="permit">
534                         <condition combine="and">
535                                 <resource-match attr="resource-id">r10</resource-match>    
536                                 <resource-match attr="r10c" match="[1234567890]+[ab]+" func="regexp" />
537                         </condition>
538         </rule>
539         </policy>
540         <policy>
541                 <rule effect="deny">
542                         <condition combine="and">
543                                 <resource-match attr="resource-id">r10</resource-match>
544                                 <resource-match attr="r10c" match="*" func="glob"/> 
545                         </condition>
546         </rule>
547     </policy>  
548 </policy-set>
549
550
551 <!-- justyna -->
552
553 <!---    test 13    (old name: test 100)-->
554
555
556 <policy-set combine="first-matching-target">
557         <target>
558                 <subject>
559                         <subject-match attr="id">s13</subject-match>
560                 </subject>  
561         </target>
562         <policy>
563                 <rule effect="permit">
564                         <condition combine="and">
565                                 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
566                         </condition>
567                  </rule>
568         </policy>
569 </policy-set>
570
571
572
573 <!---    test 14    (old name: test 101)-->
574
575 <policy-set combine="first-matching-target">
576         <target>
577                 <subject>
578                         <subject-match attr="id">s14</subject-match>
579                 </subject>  
580         </target>
581         <policy>
582                 <rule effect="permit">
583                         <condition combine="and">
584                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
585                                 <subject-match attr="version" match="5"/>
586                         </condition>
587                  </rule>
588         </policy>
589 </policy-set>
590
591
592 <!---    test 15    (old name: test 102) -->
593
594 <policy-set combine="first-matching-target">
595         <target>
596                 <subject>
597                         <subject-match attr="uri.host" match="//buu.com.pl"/>
598                 </subject>  
599         </target>
600         <policy>
601                 <rule effect="permit">
602                         <condition combine="and">
603                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
604                         </condition>
605                  </rule>
606         </policy>
607 </policy-set>
608
609 <!---    test 16    (old name: test 103) -->
610  
611 <policy-set combine="first-matching-target">
612         <target>
613                 <subject>
614                         <subject-match attr="id">s16</subject-match>
615                         <subject-match attr="uri.host" match="v.com.pl"/>
616                         
617                 </subject>  
618         </target>
619         <policy>
620                 <rule effect="permit">
621                         <condition combine="and">
622                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
623                         </condition>
624                  </rule>
625         </policy>
626 </policy-set>
627
628
629
630 <!---    test 17    (old name: test 104)-->
631
632 <policy-set combine="first-matching-target">
633         <target>
634             <subject>
635                 <subject-match attr="id">subject4</subject-match>                    
636                 <subject-match attr="version" match="4" />
637             </subject>  
638         </target>
639 <policy>
640         <rule effect="permit">
641             <condition>
642                 <resource-match attr="resource-id">
643                     resource4
644                 </resource-match>                    
645             </condition>
646         </rule>
647     </policy>
648 </policy-set> 
649
650
651 <policy-set combine="first-matching-target">
652         <target>
653             <subject>
654                 <subject-match attr="id">subject5</subject-match>                    
655                 <subject-match attr="version" match="4" />
656             </subject>  
657         </target>
658 <policy>
659         <rule effect="deny">
660             <condition>
661                 <resource-match attr="resource-id">
662                     resource4
663                 </resource-match>                    
664             </condition>
665         </rule>
666     </policy>
667 </policy-set> 
668
669 <!---    test 18    (old name: test 105)-->
670
671 <policy-set combine="first-matching-target">
672         <target>
673                 <subject>
674                         <subject-match attr="uri" match="buu.com.pl"/>
675                 </subject>  
676         </target>
677         <policy>
678                 <rule effect="permit">
679                         <condition combine="and">
680                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
681                         </condition>
682                  </rule>
683         </policy>
684 </policy-set>
685
686 <policy-set combine="first-matching-target">
687         <target>
688                 <subject>
689                         <subject-match attr="id" match="s18b"/>
690                         <subject-match attr="uri" match="buu.s18b.pl"/>
691                 </subject>  
692         </target>
693         <policy>
694                 <rule effect="permit">
695                         <condition combine="and">
696                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
697                         </condition>
698                  </rule>
699         </policy>
700 </policy-set>
701
702 <policy-set combine="first-matching-target">
703         <target>
704                 <subject>
705                         <subject-match attr="id" match="s18c"/>
706                 </subject>  
707         </target>
708         <policy>
709                 <rule effect="permit">
710                         <condition combine="and">
711                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
712                                 <subject-match attr="uri" match="buu.s18c.pl"/>
713                         </condition>
714                  </rule>
715         </policy>
716 </policy-set>
717
718
719 <!---    test 19    (old name: test 106)-->
720 <policy-set combine="first-matching-target">
721         <target>
722             <subject>
723                 <subject-match attr="id">s19.1</subject-match>                    
724                  <subject-match attr="key-root-trust" match="voperator"/>
725             </subject>  
726         </target>
727 <policy>
728         <rule effect="deny">
729             <condition>
730                 <resource-match attr="resource-id">
731                     resource4
732                 </resource-match>                    
733             </condition>
734         </rule>
735     </policy>
736 </policy-set> 
737
738 <policy-set combine="first-matching-target">
739         <target>
740             <subject>
741                 <subject-match attr="id">s19.2</subject-match>                    
742                 <subject-match attr="key-root-trust" match="voperator"/>
743             </subject>  
744         </target>
745 <policy>
746         <rule effect="permit">
747             <condition>
748                 <resource-match attr="resource-id">
749                     resource4
750                 </resource-match>                    
751             </condition>
752         </rule>
753     </policy>
754 </policy-set> 
755
756
757
758 <!---    test 20    (old name: test 107)-->
759 <policy-set combine="first-matching-target">
760         <target>
761             <subject>
762                 <subject-match attr="id">s20.1</subject-match>                    
763                 <subject-match attr="signer-id" match="v7zha89%49x£$"/>
764             </subject>  
765         </target>
766 <policy>
767         <rule effect="deny">
768             <condition>
769                 <resource-match attr="resource-id">
770                     resource4
771                 </resource-match>                    
772             </condition>
773         </rule>
774     </policy>
775 </policy-set> 
776
777 <policy-set combine="first-matching-target">
778         <target>
779             <subject>
780                <subject-match attr="id">s20.2</subject-match>                    
781                <subject-match attr="signer-id" match="v7zha89%49x£$"/>
782             </subject>  
783         </target>
784 <policy>
785         <rule effect="permit">
786             <condition>
787                 <resource-match attr="resource-id">
788                     resource4
789                 </resource-match>                    
790             </condition>
791         </rule>
792     </policy>
793 </policy-set> 
794
795 <!-- justyna -->
796
797
798 <!---    test 21    (old name: test 103 U)-->
799 <policy-set combine="first-matching-target">
800         <target>
801                 <subject>
802                         <subject-match attr="id">s21</subject-match>
803                 </subject>  
804         </target>
805         <policy>
806                 <rule effect="permit">
807                         <condition combine="and">
808                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
809                                 
810                         </condition>
811                  </rule>
812         </policy>
813 </policy-set>
814
815
816 <!---    test 23    (old name: test 105 U)-->
817 <policy-set combine="first-matching-target">
818         <target>
819                 <subject>
820                         <subject-match attr="id">s23</subject-match>
821                 </subject>  
822         </target>
823         <policy>
824                 <rule effect="permit">
825                         <condition combine="and">
826                                 <resource-match attr="resource-id"  match="device:pim"/>
827                                 <subject-match attr="version" match="5"/>
828                                 
829                         </condition>
830                  </rule>
831         </policy>
832 </policy-set>
833
834
835
836 <!---    test 24    (old name: test 106 U)-->
837 <policy-set combine="first-matching-target">
838         <target>
839                 <subject>
840                         <subject-match attr="id">s24</subject-match>
841                 </subject>  
842         </target>
843         <policy>
844                 <rule effect="permit">
845                         <condition combine="or">
846                                 <subject-match attr="version" match="5"/>
847                                 <resource-match attr="resource-id"  match="device:pim"/>
848                         </condition>
849                  </rule>
850         </policy>
851 </policy-set>
852
853
854 <!---    test 25.1    (old name: test 107 U)-->
855 <policy-set combine="first-matching-target">
856         <target>
857                 <subject>
858                         <subject-match attr="id">s25.1</subject-match>
859                 </subject>  
860         </target>
861         <policy>
862                 <rule effect="permit">
863                 <condition combine="and">
864                         <condition combine="and">
865                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
866                                 <subject-match attr="version" match="5"/>
867                                 
868                         </condition>
869                         <condition combine="and">
870                                 <resource-match attr="resource-id"  match="device:pim"/>
871                                 <subject-match attr="version" match="5"/>
872                                 
873                         </condition>
874                         
875                 </condition>
876                  </rule>
877         </policy>
878 </policy-set>
879
880
881 <!---    test 25.2    (old name: test 107 a U -->
882 <policy-set combine="first-matching-target">
883         <target>
884                 <subject>
885                         <subject-match attr="id">s25.2</subject-match>
886                 </subject>  
887         </target>
888         <policy>
889                 <rule effect="permit">
890                 <condition combine="and">
891                         <condition combine="and">
892                                 <resource-match attr="resource-id"  match="device:pim"/>
893                                 <subject-match attr="version" match="5"/>
894                                 
895                         </condition>                    
896                         <condition combine="and">
897                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
898                                 <subject-match attr="version" match="5"/>
899                                 
900                         </condition>
901                         
902                         
903                 </condition>
904                  </rule>
905         </policy>
906 </policy-set>
907
908
909 <!---    test 25.3    (old name: test 107 b U -->
910 <policy-set combine="first-matching-target">
911         <target>
912                 <subject>
913                         <subject-match attr="id">s25.3</subject-match>
914                 </subject>  
915         </target>
916         <policy>
917                 <rule effect="permit">
918                 <condition combine="and">
919                         <condition combine="or">
920                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
921                                 <subject-match attr="version" match="5"/>
922                                 
923                         </condition>                    
924                         <condition combine="and">
925                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
926                                 <subject-match attr="version" match="5"/>
927                                 
928                         </condition>
929                         
930                         
931                 </condition>
932                  </rule>
933         </policy>
934 </policy-set>
935
936 <!---    test 25.4    (old name: test 107 c U -->
937 <policy-set combine="first-matching-target">
938         <target>
939                 <subject>
940                         <subject-match attr="id">s25.4</subject-match>
941                 </subject>  
942         </target>
943         <policy>
944                 <rule effect="permit">
945                 <condition combine="and">
946                         <condition combine="and">
947                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
948                                 <subject-match attr="version" match="5"/>
949                                 
950                         </condition>                    
951                         <condition combine="or">
952                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
953                                 <subject-match attr="version" match="5"/>
954                                 
955                         </condition>                    
956                         
957                         
958                         
959                 </condition>
960                  </rule>
961         </policy>
962 </policy-set>
963
964
965
966 <!---    test 26.1    (old name: test 108 U -->
967 <policy-set combine="first-matching-target">
968         <target>
969                 <subject>
970                         <subject-match attr="id">s26.1</subject-match>
971                 </subject>  
972         </target>
973         <policy>
974                 <rule effect="permit">
975                 <condition combine="or">
976                         <condition combine="and">
977                                 <resource-match attr="resource-id"  match="device:pim"/>
978                                 <subject-match attr="version" match="5"/>
979                                 
980                         </condition>
981                         <condition combine="and">
982                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
983                                 <subject-match attr="version" match="5"/>
984                                 
985                         </condition>
986                 </condition>
987                  </rule>
988         </policy>
989 </policy-set>
990
991
992 <!---    test 26.2    (old name: test 108 a U -->
993 <policy-set combine="first-matching-target">
994         <target>
995                 <subject>
996                         <subject-match attr="id">s26.2</subject-match>
997                 </subject>  
998         </target>
999         <policy>
1000                 <rule effect="permit">
1001                 <condition combine="or">
1002                         <condition combine="or">
1003                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1004                                 <subject-match attr="version" match="5"/>
1005                                 
1006                         </condition>
1007                         <condition combine="and">
1008                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1009                                 <subject-match attr="version" match="5"/>
1010                                 
1011                         </condition>
1012                 </condition>
1013                  </rule>
1014         </policy>
1015 </policy-set>
1016
1017
1018 <!---    test 26.3    (old name: test 108 b U -->
1019 <policy-set combine="first-matching-target">
1020         <target>
1021                 <subject>
1022                         <subject-match attr="id">s26.3</subject-match>
1023                 </subject>  
1024         </target>
1025         <policy>
1026                 <rule effect="permit">
1027                 <condition combine="or">
1028                         <condition combine="and">
1029                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1030                                 <subject-match attr="version" match="5"/>
1031                                 
1032                         </condition>                    
1033                         <condition combine="or">
1034                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1035                                 <subject-match attr="version" match="5"/>
1036                                 
1037                         </condition>
1038                         
1039                 </condition>
1040                  </rule>
1041         </policy>
1042 </policy-set>
1043
1044 <!---    test 26.4    (old name: test 108 c U -->
1045 <policy-set combine="first-matching-target">
1046         <target>
1047                 <subject>
1048                         <subject-match attr="id">s26.4</subject-match>
1049                 </subject>  
1050         </target>
1051         <policy>
1052                 <rule effect="permit">
1053                 <condition combine="or">
1054                         <condition combine="and">
1055                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1056                                 <subject-match attr="version" match="5"/>
1057                                 
1058                         </condition>                    
1059                         <condition combine="and">
1060                                 <resource-match attr="resource-id"  match="device:pim"/>
1061                                 <subject-match attr="version" match="5"/>
1062                                 
1063                         </condition>
1064                         
1065                 </condition>
1066                  </rule>
1067         </policy>
1068 </policy-set>
1069
1070
1071
1072 <!---    test 27.1    (old name: test 109 U -->
1073 <policy-set combine="first-matching-target">
1074         <target>
1075                 <subject>
1076                         <subject-match attr="id">s27.1</subject-match>
1077                 </subject>  
1078         </target>
1079         <policy>
1080                 <rule effect="permit">
1081                 <condition combine="or">
1082                         <condition combine="or">
1083                                 <resource-match attr="resource-id"  match="device:pim"/>
1084                                 <subject-match attr="version" match="5"/>
1085                                 
1086                         </condition>
1087                         <condition combine="or">
1088                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1089                                 <subject-match attr="version" match="5"/>
1090                                 
1091                         </condition>
1092                 </condition>
1093                  </rule>
1094         </policy>
1095 </policy-set>
1096
1097 <!---    test 27.2    (old name: test 109a U -->
1098 <policy-set combine="first-matching-target">
1099         <target>
1100                 <subject>
1101                         <subject-match attr="id">s27.2</subject-match>
1102                 </subject>  
1103         </target>
1104         <policy>
1105                 <rule effect="permit">
1106                 <condition combine="or">
1107                         <condition combine="or">
1108                                 <resource-match attr="resource-id"  match="device:pim"/>
1109                                 <subject-match attr="version" match="5"/>
1110                                 
1111                         </condition>
1112                         <condition combine="and">
1113                                 <resource-match attr="resource-id"  match="device:pim"/>
1114                                 <subject-match attr="version" match="5"/>
1115                                 
1116                         </condition>
1117                 </condition>
1118                  </rule>
1119         </policy>
1120 </policy-set>
1121
1122 <!---    test 27.3    (old name: test 109b U -->
1123 <policy-set combine="first-matching-target">
1124         <target>
1125                 <subject>
1126                         <subject-match attr="id">s27.3</subject-match>
1127                 </subject>  
1128         </target>
1129         <policy>
1130                 <rule effect="permit">
1131                 <condition combine="or">
1132                         <condition combine="and">
1133                                 <resource-match attr="resource-id"  match="device:pim"/>
1134                                 <subject-match attr="version" match="5"/>
1135                                 
1136                         </condition>
1137                         <condition combine="or">
1138                                 <resource-match attr="resource-id"  match="device:pim"/>
1139                                 <subject-match attr="version" match="5"/>
1140                                 
1141                         </condition>
1142                 </condition>
1143                  </rule>
1144         </policy>
1145 </policy-set>
1146
1147
1148
1149 <!---    test 27.4    (old name: test 109c U -->
1150 <policy-set combine="first-matching-target">
1151         <target>
1152                 <subject>
1153                         <subject-match attr="id">s27.4</subject-match>
1154                 </subject>  
1155         </target>
1156         <policy>
1157                 <rule effect="permit">
1158                 <condition combine="or">
1159                         <condition combine="or">
1160                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1161                                 <subject-match attr="version" match="5"/>
1162                                 
1163                         </condition>
1164                         <condition combine="or">
1165                                 <resource-match attr="resource-id"  match="device:pim"/>
1166                                 <subject-match attr="version" match="5"/>
1167                                 
1168                         </condition>
1169                 </condition>
1170                  </rule>
1171         </policy>
1172 </policy-set>
1173
1174
1175
1176 <!---    test 28    (old name: test 110 U -->
1177 <policy-set combine="first-matching-target">
1178         <target>
1179                 <subject>
1180                         <subject-match attr="id">s28</subject-match>
1181                 </subject>  
1182         </target>
1183         <policy>
1184                 <rule effect="permit">
1185                 <condition combine="or">
1186                         <condition combine="and">
1187                                 <resource-match attr="resource-id"  match="device:pim"/>
1188                                 <subject-match attr="version" match="5"/>
1189                                 
1190                         </condition>
1191                         <condition combine="or">
1192                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1193                                 <subject-match attr="version" match="5"/>
1194                                 
1195                         </condition>
1196                 </condition>
1197                  </rule>
1198         </policy>
1199 </policy-set>
1200
1201
1202 <!---    test 29    (old name: test 111 U -->
1203 <policy-set combine="first-matching-target">
1204         <target>
1205                 <subject>
1206                         <subject-match attr="id">s29</subject-match>
1207                 </subject>  
1208         </target>
1209         <policy>
1210                 <rule effect="permit">
1211                 <condition combine="and">
1212                         <condition combine="and">
1213                                 <resource-match attr="resource-id"  match="device:pim"/>
1214                                 <subject-match attr="version" match="5"/>
1215                                 
1216                         </condition>
1217                         <condition combine="or">
1218                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1219                                 <subject-match attr="version" match="5"/>
1220                                 
1221                         </condition>
1222                 </condition>
1223                  </rule>
1224         </policy>
1225 </policy-set>
1226
1227 <!---    test 30.1    (old name: test 112 U -->
1228 <policy-set combine="first-matching-target">
1229         <target>
1230                 <subject>
1231                         <subject-match attr="id">s30.1</subject-match>
1232                 </subject>  
1233         </target>
1234         <policy>
1235                 <rule effect="permit">
1236                 <condition combine="and">
1237                         <condition combine="and">
1238                                 <resource-match attr="resource-id"  match="device:pim"/>
1239                                 <subject-match attr="version" match="5"/>
1240                                 
1241                         </condition>
1242                         <condition combine="or">
1243                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1244                                 <subject-match attr="version" match="5"/>
1245                                 
1246                         </condition>
1247                 </condition>
1248                  </rule>
1249         </policy>
1250
1251         <policy>
1252                 <rule effect="deny">
1253                 <condition combine="or">
1254                         <condition combine="and">
1255                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1256                                 <subject-match attr="version" match="5"/>
1257                                 
1258                         </condition>
1259                         <condition combine="and">
1260                                 <resource-match attr="resource-id"  match="device:pim"/>
1261                                 <subject-match attr="version" match="5"/>
1262                                 
1263                         </condition>
1264                         
1265                 </condition>
1266                  </rule>
1267         </policy>
1268 </policy-set>
1269
1270
1271 <!---    test 30.2    (old name: test 112a U -->
1272 <policy-set combine="first-matching-target">
1273         <target>
1274                 <subject>
1275                         <subject-match attr="id">s30.2</subject-match>
1276                 </subject>  
1277         </target>
1278         <policy>
1279                 <rule effect="permit">
1280                 <condition combine="or">
1281                         <condition combine="and">
1282                                 <resource-match attr="resource-id"  match="device:pim"/>
1283                                 <subject-match attr="version" match="5"/>
1284                                 
1285                         </condition>
1286                         <condition combine="or">
1287                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1288                                 <subject-match attr="version" match="5"/>
1289                                 
1290                         </condition>
1291                 </condition>
1292                  </rule>
1293         </policy>
1294
1295         <policy>
1296                 <rule effect="deny">
1297                 <condition combine="or">
1298                         <condition combine="and">
1299                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1300                                 <subject-match attr="version" match="5"/>
1301                                 
1302                         </condition>
1303                         <condition combine="and">
1304                                 <resource-match attr="resource-id"  match="device:pim"/>
1305                                 <subject-match attr="version" match="5"/>
1306                                 
1307                         </condition>
1308                         
1309                 </condition>
1310                  </rule>
1311         </policy>
1312 </policy-set>
1313
1314
1315 <!---    test 30.3    (old name: test 112b U -->
1316 <policy-set combine="first-matching-target">
1317         <target>
1318                 <subject>
1319                         <subject-match attr="id">s30.3</subject-match>
1320                 </subject>  
1321         </target>
1322         <policy>
1323                 <rule effect="permit">
1324                 <condition combine="or">
1325                         <condition combine="and">
1326                                 <resource-match attr="resource-id"  match="device:pim"/>
1327                                 <subject-match attr="version" match="5"/>
1328                                 
1329                         </condition>
1330                         <condition combine="and">
1331                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1332                                 <subject-match attr="version" match="5"/>
1333                                 
1334                         </condition>
1335                 </condition>
1336                  </rule>
1337         </policy>
1338
1339         <policy>
1340                 <rule effect="deny">
1341                 <condition combine="and">
1342                         <condition combine="and">
1343                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1344                                 <subject-match attr="version" match="5"/>
1345                                 
1346                         </condition>
1347                         <condition combine="and">
1348                                 <resource-match attr="resource-id"  match="device:pim"/>
1349                                 <subject-match attr="version" match="5"/>
1350                                 
1351                         </condition>
1352                         
1353                 </condition>
1354                  </rule>
1355         </policy>
1356 </policy-set>
1357
1358 <!---    test 30.4    (old name: test 112c U -->
1359 <policy-set combine="first-matching-target">
1360         <target>
1361                 <subject>
1362                         <subject-match attr="id">s30.4</subject-match>
1363                 </subject>  
1364         </target>
1365         <policy>
1366                 <rule effect="deny">
1367                 <condition combine="or">
1368                         <condition combine="and">
1369                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1370                                 <subject-match attr="version" match="5"/>
1371                                 
1372                         </condition>
1373                         <condition combine="and">
1374                                 <resource-match attr="resource-id"  match="device:pim"/>
1375                                 <subject-match attr="version" match="5"/>
1376                                 
1377                         </condition>
1378                         
1379                 </condition>
1380                  </rule>
1381         </policy>
1382         
1383         <policy>
1384                 <rule effect="permit">
1385                 <condition combine="or">
1386                         <condition combine="and">
1387                                 <resource-match attr="resource-id"  match="device:pim"/>
1388                                 <subject-match attr="version" match="5"/>
1389                                 
1390                         </condition>
1391                         <condition combine="or">
1392                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1393                                 <subject-match attr="version" match="5"/>
1394                                 
1395                         </condition>
1396                 </condition>
1397                  </rule>
1398         </policy>
1399         
1400 </policy-set>
1401
1402
1403
1404 <!---    test 31.1    (old name: test 113 U -->
1405 <policy-set combine="deny-overrides">
1406         <target>
1407                 <subject>
1408                         <subject-match attr="id">s31.1</subject-match>
1409                 </subject>  
1410         </target>
1411         <policy>
1412                 <rule effect="permit">
1413                 <condition combine="and">
1414                         <condition combine="or">
1415                                 <resource-match attr="resource-id"  match="device:pim"/>
1416                                 <subject-match attr="version" match="5"/>
1417                                 
1418                         </condition>
1419                         <condition combine="and">
1420                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1421                                 <subject-match attr="version" match="5"/>
1422                                 
1423                         </condition>
1424                 </condition>
1425                  </rule>
1426         </policy>
1427
1428         <policy>
1429                 <rule effect="deny">
1430                 <condition combine="and">
1431                         <condition combine="and">
1432                                 <resource-match attr="resource-id"  match="device:pim"/>
1433                                 <subject-match attr="version" match="5"/>
1434                                 
1435                         </condition>
1436                         <condition combine="or">
1437                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1438                                 <subject-match attr="version" match="5"/>
1439                                 
1440                         </condition>
1441                 </condition>
1442                  </rule>
1443         </policy>
1444 </policy-set>
1445
1446
1447
1448 <!---    test 31.2.1    (old name: test 113a U -->
1449 <policy-set combine="deny-overrides">
1450         <target>
1451                 <subject>
1452                         <subject-match attr="id">s31.2.1</subject-match>
1453                 </subject>  
1454         </target>
1455         <policy>
1456                 <rule effect="permit">
1457                 <condition combine="and">
1458                         <condition combine="or">
1459                                 <resource-match attr="resource-id"  match="device:pim"/>
1460                                 <subject-match attr="version" match="5"/>
1461                                 
1462                         </condition>
1463                         <condition combine="and">
1464                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1465                                 <subject-match attr="version" match="5"/>
1466                                 
1467                         </condition>
1468                 </condition>
1469                  </rule>
1470         </policy>
1471
1472         <policy>
1473                 <rule effect="deny">
1474                 <condition combine="or">
1475                         <condition combine="or">
1476                                 <resource-match attr="resource-id"  match="device:pim"/>
1477                                 <subject-match attr="version" match="5"/>
1478                                 
1479                         </condition>
1480                         <condition combine="or">
1481                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1482                                 <subject-match attr="version" match="5"/>
1483                                 
1484                         </condition>
1485                 </condition>
1486                  </rule>
1487         </policy>
1488 </policy-set>
1489
1490
1491 <!---    test 31.2.2    (old name: test 113aa U -->
1492 <policy-set combine="deny-overrides">
1493         <target>
1494                 <subject>
1495                         <subject-match attr="id">s31.2.2</subject-match>
1496                 </subject>  
1497         </target>
1498         <policy>
1499                 <rule effect="permit">
1500                 <condition combine="and">
1501                         <condition combine="or">
1502                                 <resource-match attr="resource-id"  match="device:pim"/>
1503                                 <subject-match attr="version" match="5"/>
1504                                 
1505                         </condition>
1506                         <condition combine="and">
1507                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1508                                 <subject-match attr="version" match="5"/>
1509                                 
1510                         </condition>
1511                 </condition>
1512                  </rule>
1513         </policy>
1514
1515         <policy>
1516                 <rule effect="permit">
1517                 <condition combine="or">
1518                         <condition combine="or">
1519                                 <resource-match attr="resource-id"  match="device:pim"/>
1520                                 <subject-match attr="version" match="5"/>
1521                                 
1522                         </condition>
1523                         <condition combine="or">
1524                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1525                                 <subject-match attr="version" match="5"/>
1526                                 
1527                         </condition>
1528                 </condition>
1529                  </rule>
1530         </policy>
1531 </policy-set>
1532
1533
1534 <!---    test 31.3    (old name: test 113b U -->
1535 <policy-set combine="deny-overrides">
1536         <target>
1537                 <subject>
1538                         <subject-match attr="id">s31.3</subject-match>
1539                 </subject>  
1540         </target>
1541
1542         
1543         <policy>
1544                 <rule effect="permit">
1545                 <condition combine="and">
1546                         <condition combine="or">
1547                                 <resource-match attr="resource-id"  match="device:pim"/>
1548                                 <subject-match attr="version" match="5"/>
1549                                 
1550                         </condition>
1551                         <condition combine="and">
1552                                 <resource-match attr="resource-id"  match="device:pim"/>
1553                                 <subject-match attr="version" match="5"/>
1554                                 
1555                         </condition>
1556                 </condition>
1557                  </rule>
1558         </policy>
1559
1560         <policy>
1561                 <rule effect="permit">
1562                 <condition combine="and">
1563                         <condition combine="or">
1564                                 <resource-match attr="resource-id"  match="device:pim"/>
1565                                 <subject-match attr="version" match="5"/>
1566                                 
1567                         </condition>
1568                         <condition combine="and">
1569                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1570                                 <subject-match attr="version" match="5"/>
1571                                 
1572                         </condition>
1573                 </condition>
1574                  </rule>
1575         </policy>
1576
1577 </policy-set>
1578
1579 <!---    test 32.1    (old name: test 114 U -->
1580 <policy-set combine="permit-overrides">
1581         <target>
1582                 <subject>
1583                         <subject-match attr="id">s32.1</subject-match>
1584                 </subject>  
1585         </target>
1586         <policy>
1587                 <rule effect="permit">
1588                 <condition combine="and">
1589                         <condition combine="and">
1590                                 <resource-match attr="resource-id"  match="device:pim"/>
1591                                 <subject-match attr="version" match="5"/>
1592                                 
1593                         </condition>
1594                         <condition combine="or">
1595                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1596                                 <subject-match attr="version" match="5"/>
1597                                 
1598                         </condition>
1599                 </condition>
1600                  </rule>
1601         </policy>
1602
1603         <policy>
1604                 <rule effect="deny">
1605                 <condition combine="or">
1606                         <condition combine="and">
1607                                 <resource-match attr="resource-id"  match="device:pim"/>
1608                                 <subject-match attr="version" match="5"/>
1609                                 
1610                         </condition>
1611                         <condition combine="and">
1612                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1613                                 <subject-match attr="version" match="5"/>
1614                                 
1615                         </condition>
1616                 </condition>
1617                  </rule>
1618         </policy>
1619 </policy-set>
1620
1621
1622 <!---    test 32.2.1    (old name: test 114a U -->
1623 <policy-set combine="permit-overrides">
1624         <target>
1625                 <subject>
1626                         <subject-match attr="id">s32.2.1</subject-match>
1627                 </subject>  
1628         </target>
1629         <policy>
1630                 <rule effect="permit">
1631                 <condition combine="or">
1632                         <condition combine="and">
1633                                 <resource-match attr="resource-id"  match="device:pim"/>
1634                                 <subject-match attr="version" match="5"/>
1635                                 
1636                         </condition>
1637                         <condition combine="or">
1638                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1639                                 <subject-match attr="version" match="5"/>
1640                                 
1641                         </condition>
1642                 </condition>
1643                  </rule>
1644         </policy>
1645
1646         <policy>
1647                 <rule effect="deny">
1648                 <condition combine="or">
1649                         <condition combine="and">
1650                                 <resource-match attr="resource-id"  match="device:pim"/>
1651                                 <subject-match attr="version" match="5"/>
1652                                 
1653                         </condition>
1654                         <condition combine="and">
1655                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1656                                 <subject-match attr="version" match="5"/>
1657                                 
1658                         </condition>
1659                 </condition>
1660                  </rule>
1661         </policy>
1662 </policy-set>
1663
1664 <!---    test 32.2.2    (old name: test 114aa U -->
1665 <policy-set combine="permit-overrides">
1666         <target>
1667                 <subject>
1668                         <subject-match attr="id">s32.2.2</subject-match>
1669                 </subject>  
1670         </target>
1671         <policy>
1672                 <rule effect="deny">
1673                 <condition combine="or">
1674                         <condition combine="and">
1675                                 <resource-match attr="resource-id"  match="device:pim"/>
1676                                 <subject-match attr="version" match="5"/>
1677                                 
1678                         </condition>
1679                         <condition combine="or">
1680                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1681                                 <subject-match attr="version" match="5"/>
1682                                 
1683                         </condition>
1684                 </condition>
1685                  </rule>
1686         </policy>
1687
1688         <policy>
1689                 <rule effect="deny">
1690                 <condition combine="or">
1691                         <condition combine="and">
1692                                 <resource-match attr="resource-id"  match="device:pim"/>
1693                                 <subject-match attr="version" match="5"/>
1694                                 
1695                         </condition>
1696                         <condition combine="and">
1697                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1698                                 <subject-match attr="version" match="5"/>
1699                                 
1700                         </condition>
1701                 </condition>
1702                  </rule>
1703         </policy>
1704 </policy-set>
1705
1706 <!---    test 32.3    (old name: test 114b U -->
1707 <policy-set combine="permit-overrides">
1708         <target>
1709                 <subject>
1710                         <subject-match attr="id">s32.3</subject-match>
1711                 </subject>  
1712         </target>
1713         <policy>
1714                 <rule effect="deny">
1715                 <condition combine="or">
1716                         <condition combine="and">
1717                                 <resource-match attr="resource-id"  match="device:pim"/>
1718                                 <subject-match attr="version" match="5"/>
1719                                 
1720                         </condition>
1721                         <condition combine="or">
1722                                 <resource-match attr="resource-id"  match="device"/>
1723                                 <subject-match attr="version" match="5"/>
1724                                 
1725                         </condition>
1726                 </condition>
1727                  </rule>
1728         </policy>
1729
1730         <policy>
1731                 <rule effect="deny">
1732                 <condition combine="and">
1733                         <condition combine="and">
1734                                 <resource-match attr="resource-id"  match="device:pim"/>
1735                                 <subject-match attr="version" match="5"/>
1736                                 
1737                         </condition>
1738                         <condition combine="and">
1739                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1740                                 <subject-match attr="version" match="5"/>
1741                                 
1742                         </condition>
1743                 </condition>
1744                  </rule>
1745         </policy>
1746 </policy-set>
1747
1748
1749 <!---    test 33.1    (old name: test 115 U -->
1750 <policy-set combine="first-matching-target">
1751         <target>
1752                 <subject>
1753                         <subject-match attr="id">s33.1</subject-match>
1754                 </subject>  
1755         </target>
1756         <policy combine="first-applicable">
1757                 <rule effect="permit">
1758                         <condition combine="and">
1759                                 <resource-match attr="resource-id"  match="device:pim"/>
1760                                 <subject-match attr="version" match="5"/>
1761                                 
1762                         </condition>
1763                 </rule>
1764                 <rule effect="permit">
1765                         <condition combine="and">
1766                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1767                                 <subject-match attr="version" match="5"/>
1768                                 
1769                         </condition>
1770                  </rule>
1771         </policy>
1772 </policy-set>
1773
1774
1775 <!---    test 33.2    (old name: test 115a U -->
1776 <policy-set combine="first-matching-target">
1777         <target>
1778                 <subject>
1779                         <subject-match attr="id">s33.2</subject-match>
1780                 </subject>  
1781         </target>
1782         <policy combine="first-applicable">
1783                 <rule effect="permit">
1784                         <condition combine="or">
1785                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1786                                 <subject-match attr="version" match="5"/>
1787                                 
1788                         </condition>
1789                 </rule>
1790                 <rule effect="permit">
1791                         <condition combine="and">
1792                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1793                                 <subject-match attr="version" match="5"/>
1794                                 
1795                         </condition>
1796                  </rule>
1797         </policy>
1798 </policy-set>
1799
1800
1801 <!---    test 33.3    (old name: test 115b U -->
1802 <policy-set combine="first-matching-target">
1803         <target>
1804                 <subject>
1805                         <subject-match attr="id">s33.3</subject-match>
1806                 </subject>  
1807         </target>
1808         <policy combine="first-applicable">
1809                 <rule effect="permit">
1810                         <condition combine="and">
1811                                 <resource-match attr="resource-id"  match="device:pim"/>
1812                                 <subject-match attr="version" match="5"/>
1813                                 
1814                         </condition>
1815                 </rule>
1816                 <rule effect="permit">
1817                         <condition combine="or">
1818                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1819                                 <subject-match attr="version" match="5"/>
1820                                 
1821                         </condition>
1822                  </rule>
1823         </policy>
1824 </policy-set>
1825
1826
1827 <!---    test 34.1    (old name: test 116 U -->
1828 <policy-set combine="first-matching-target">
1829         <target>
1830                 <subject>
1831                         <subject-match attr="id">s34.1</subject-match>
1832                 </subject>  
1833         </target>
1834         <policy  combine="permit-overrides">
1835                 <rule effect="permit">
1836                         <condition combine="and">
1837                                 <resource-match attr="resource-id"  match="device:pim"/>
1838                                 <subject-match attr="version" match="5"/>               
1839                         </condition>
1840                 </rule>
1841                 <rule effect="permit">
1842                         <condition combine="and">
1843                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1844                                 <subject-match attr="version" match="5"/>
1845                                 
1846                         </condition>
1847                  </rule>
1848         </policy>
1849 </policy-set>
1850
1851 <!---    test 34.2    (old name: test 116 a U -->
1852 <policy-set combine="first-matching-target">
1853         <target>
1854                 <subject>
1855                         <subject-match attr="id">s34.2</subject-match>
1856                 </subject>  
1857         </target>
1858         <policy  combine="permit-overrides">
1859                 <rule effect="permit">
1860                         <condition combine="and">
1861                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1862                                 <subject-match attr="version" match="5"/>               
1863                         </condition>
1864                 </rule>
1865                 <rule effect="permit">
1866                         <condition combine="and">
1867                                 <resource-match attr="resource-id"  match="device:pim"/>
1868                                 <subject-match attr="version" match="5"/>
1869                                 
1870                         </condition>
1871                  </rule>
1872         </policy>
1873 </policy-set>
1874
1875
1876
1877 <!---    test 35.1    (old name: test 117 U -->
1878 <policy-set combine="first-matching-target">
1879         <target>
1880                 <subject>
1881                         <subject-match attr="id">s35.1</subject-match>
1882                 </subject>  
1883         </target>
1884         <policy combine="deny-overrides">
1885                 <rule effect="permit">
1886                         <condition combine="and">
1887                                 <resource-match attr="resource-id"  match="device:pim"/>
1888                                 <subject-match attr="version" match="5"/>
1889                                 
1890                         </condition>
1891                  </rule>
1892                 <rule effect="permit">
1893                         <condition combine="and">
1894                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1895                                 <subject-match attr="version" match="5"/>
1896                                 
1897                         </condition>
1898                  </rule>
1899         </policy>
1900 </policy-set>
1901
1902
1903 <!---    test 35.2    (old name: test 117 a U -->
1904 <policy-set combine="first-matching-target">
1905         <target>
1906                 <subject>
1907                         <subject-match attr="id">s35.2</subject-match>
1908                 </subject>  
1909         </target>
1910         <policy combine="deny-overrides">
1911                 <rule effect="deny">
1912                         <condition combine="and">
1913                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1914                                 <subject-match attr="version" match="5"/>
1915                                 
1916                         </condition>
1917                  </rule>
1918                 <rule effect="permit">
1919                         <condition combine="and">
1920                                 <resource-match attr="resource-id"  match="device"/>
1921                                 <subject-match attr="version" match="5"/>
1922                                 
1923                         </condition>
1924                  </rule>
1925         </policy>
1926 </policy-set>
1927
1928 <policy-set>
1929         <target>
1930                 <subject>
1931                         <subject-match attr="id">org.tizen.widget.analogclock</subject-match>
1932                 </subject>  
1933         </target>
1934         <policy combine="first-applicable">
1935                 <rule effect="permit">
1936                         <condition combine="and">
1937                                 <resource-match attr="resource-id"  match="http://helloheloo/"/>
1938                         </condition>
1939                  </rule>
1940         </policy>
1941 </policy-set>
1942
1943
1944 <!---    test 36    (old name: test 102 U -->
1945 <policy-set combine="first-matching-target">
1946         <target>
1947                 <subject>
1948                         <subject-match attr="id">s36</subject-match>
1949                         <subject-match attr="version" match="5"/>
1950                 </subject>  
1951         </target>
1952         <policy>
1953                 <rule effect="permit">
1954                         <condition combine="and">
1955                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1956                                 <subject-match attr="version" match="5"/>
1957                         </condition>
1958                  </rule>
1959         </policy>
1960 </policy-set>
1961
1962
1963
1964
1965 <!---    test 37    (old name: test 108 -->
1966 <!-- mbialota modified -->
1967
1968 <policy-set combine="first-matching-target">
1969         <target>
1970                 <subject>
1971                         <subject-match attr="id">s37</subject-match>
1972                 </subject>  
1973         </target>
1974         <policy>
1975                 <rule effect="prompt-oneshot">
1976                         <condition combine="and">
1977                                 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
1978                         </condition>
1979                  </rule>
1980         </policy>
1981 </policy-set>
1982
1983
1984 <!---    test 38    (old name: test 109 -->
1985 <!-- mbialota modified -->
1986
1987 <policy-set combine="first-matching-target">
1988         <target>
1989                 <subject>
1990                         <subject-match attr="id">s38</subject-match>
1991                 </subject>  
1992         </target>
1993         <policy>
1994                 <rule effect="prompt-session">
1995                         <condition combine="and">
1996                                 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
1997                         </condition>
1998                  </rule>
1999         </policy>
2000 </policy-set>
2001
2002 <policy-set combine="first-matching-target">
2003         <target>
2004                 <subject>
2005                         <subject-match attr="id">s38.4</subject-match>
2006                 </subject>  
2007         </target>
2008         <policy>
2009                 <rule effect="prompt-session">
2010                         <condition combine="and">
2011                                 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
2012                         </condition>
2013                  </rule>
2014         </policy>
2015 </policy-set>
2016
2017 <!---    test 39    (old name: test 110 -->
2018 <!-- mbialota modified -->
2019
2020 <policy-set combine="first-matching-target">
2021         <target>
2022                 <subject>
2023                         <subject-match attr="id">s39</subject-match>
2024                 </subject>  
2025         </target>
2026         <policy>
2027                 <rule effect="prompt-blanket">
2028                         <condition combine="and">
2029                                 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
2030                         </condition>
2031                  </rule>
2032         </policy>
2033 </policy-set>
2034
2035 <policy-set combine="first-matching-target">
2036         <target>
2037                 <subject>
2038                         <subject-match attr="id">s39.4</subject-match>
2039                 </subject>  
2040         </target>
2041         <policy>
2042                 <rule effect="prompt-blanket">
2043                         <condition combine="and">
2044                                 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
2045                         </condition>
2046                  </rule>
2047         </policy>
2048 </policy-set>
2049
2050
2051 <!-- Maria -->
2052 <!-- testing different methods of policies and rules combining-->
2053 <!---    test 40    (old name: test 200 -->
2054
2055 <!--- two opposite rules put into different policies in one policy set -->
2056 <policy-set combine="first-matching-target">
2057         <target>
2058                 <subject>
2059                         <subject-match attr="id">s40</subject-match>
2060                 </subject>  
2061         </target>
2062         <policy>
2063                 <rule effect="permit">
2064                         <condition combine="and">
2065                                 <resource-match attr="resource-id">r40</resource-match>    
2066                         </condition>
2067         </rule>
2068         </policy>
2069         <policy>
2070                 <rule effect="deny">
2071                         <condition combine="and">
2072                                 <resource-match attr="resource-id">r40</resource-match>    
2073                         </condition>
2074         </rule>
2075     </policy>
2076 </policy-set>
2077
2078 <!---    test 41    (old name: test 201 -->
2079
2080 <!--- two different rules put into different policies in one policy set-->
2081 <policy-set combine="first-matching-target">
2082         <target>
2083                 <subject>
2084                         <subject-match attr="id">s41</subject-match>
2085                 </subject>  
2086         </target>
2087         <policy>
2088                 <rule effect="permit">
2089                         <condition combine="and">
2090                                 <resource-match attr="resource-id">r41</resource-match>    
2091                         </condition>
2092                 </rule>
2093                 <rule effect="deny">
2094                         <condition combine="and">
2095                                 <resource-match attr="resource-id">r41.2</resource-match>    
2096                         </condition>
2097                 </rule>
2098         </policy>
2099 </policy-set>
2100
2101 <!---    test 42.1    (old name: test 202 -->
2102 <!--- two opposite rules put into one policy in one policy set-->
2103 <!--- this case will have the result of deny because of default rules combining==deny override, which is not the same as policies combining -->
2104
2105 <policy-set combine="first-matching-target">
2106         <target>
2107                 <subject>
2108                         <subject-match attr="id">s42.1</subject-match>
2109                 </subject>  
2110         </target>
2111         <policy>
2112                 <rule effect="permit">
2113                         <condition combine="and">
2114                                 <resource-match attr="resource-id">r42.1</resource-match>    
2115                         </condition>
2116                 </rule>
2117                 <rule effect="deny">
2118                         <condition combine="and">
2119                                 <resource-match attr="resource-id">r42.1</resource-match>    
2120                         </condition>
2121                 </rule>
2122         </policy>
2123 </policy-set>
2124
2125 <!---    test 42.2    (old name: test 202b -->
2126 <!--- two opposite rules put into one policy in one policy set-->
2127 <!--- this case will have the result of deny because of default rules combining==deny override, which is not the same as policies combining -->
2128
2129 <policy-set combine="first-matching-target">
2130         <target>
2131                 <subject>
2132                         <subject-match attr="id">s42.2</subject-match>
2133                 </subject>  
2134         </target>
2135         <policy>
2136                 <rule effect="deny">
2137                         <condition combine="and">
2138                                 <resource-match attr="resource-id">r42.2</resource-match>    
2139                         </condition>
2140                 </rule>
2141                 <rule effect="permit">
2142                         <condition combine="and">
2143                                 <resource-match attr="resource-id">r42.2</resource-match>    
2144                         </condition>
2145                 </rule>
2146         </policy>
2147 </policy-set>
2148
2149 <!---    test 43.1    (old name: test 203 -->
2150
2151 <!--- two opposite rules put into different policies in one policy set-->
2152 <policy-set combine="deny-overrides">
2153         <target>
2154                 <subject>
2155                         <subject-match attr="id">s43.1</subject-match>
2156                 </subject>  
2157         </target>
2158         <policy>
2159                 <rule effect="permit">
2160                         <condition combine="and">
2161                                 <resource-match attr="resource-id">r43.1</resource-match>    
2162                         </condition>
2163                 </rule>
2164         </policy>
2165         <policy>
2166                 <rule effect="deny">
2167                         <condition combine="and">
2168                                 <resource-match attr="resource-id">r43.1</resource-match>    
2169                         </condition>
2170                 </rule>
2171     </policy>
2172 </policy-set>
2173 <!---    test 43.2    (old name: test 203b -->
2174
2175 <!--- two opposite rules put into different policies in one policy set-->
2176 <policy-set combine="deny-overrides">
2177         <target>
2178                 <subject>
2179                         <subject-match attr="id">s43.2</subject-match>
2180                 </subject>  
2181         </target>
2182         <policy>
2183                 <rule effect="deny">
2184                         <condition combine="and">
2185                                 <resource-match attr="resource-id">r43.2</resource-match>    
2186                         </condition>
2187                 </rule>
2188         </policy>
2189         <policy>
2190                 <rule effect="permit">
2191                         <condition combine="and">
2192                                 <resource-match attr="resource-id">r43.2</resource-match>    
2193                         </condition>
2194                 </rule>
2195     </policy>
2196 </policy-set>
2197
2198 <!---    test 44.1    (old name: test 204 -->
2199 <!--- two different rules put into different policies in one policy set-->
2200 <policy-set combine="permit-overrides">
2201         <target>
2202                 <subject>
2203                         <subject-match attr="id">s44.1</subject-match>
2204                 </subject>  
2205         </target>
2206         <policy>
2207                 <rule effect="permit">
2208                         <condition combine="and">
2209                                 <resource-match attr="resource-id">r44.1</resource-match>    
2210                         </condition>
2211                 </rule>
2212         </policy>
2213         <policy>
2214                 <rule effect="deny">
2215                         <condition combine="and">
2216                                 <resource-match attr="resource-id">r44.1</resource-match>    
2217                         </condition>
2218                 </rule>
2219     </policy>
2220 </policy-set>
2221
2222 <!---    test 44.2    (old name: test 204b -->
2223 <!--- two different rules put into different policies in one policy set-->
2224 <policy-set combine="permit-overrides">
2225         <target>
2226                 <subject>
2227                         <subject-match attr="id">s44.2</subject-match>
2228                 </subject>  
2229         </target>
2230         <policy>
2231                 <rule effect="deny">
2232                         <condition combine="and">
2233                                 <resource-match attr="resource-id">r44.2</resource-match>    
2234                         </condition>
2235                 </rule>
2236         </policy>
2237         <policy>
2238                 <rule effect="permit">
2239                         <condition combine="and">
2240                                 <resource-match attr="resource-id">r44.2</resource-match>    
2241                         </condition>
2242                 </rule>
2243     </policy>
2244 </policy-set>
2245
2246 <!---    test 45.1    (old name: test 205 -->
2247 <!--- two opposite rules put into one policy -->
2248 <!--- testing rules combining methods-->
2249 <!--- this case should have the result of permit in contradiction to test 202 -->
2250 <policy-set combine="first-matching-target">
2251         <target>
2252                 <subject>
2253                         <subject-match attr="id">s45.1</subject-match>
2254                 </subject>  
2255         </target>
2256         <policy combine="first-applicable">
2257                 <rule effect="permit">
2258                         <condition combine="and">
2259                                 <resource-match attr="resource-id">r45.1</resource-match>    
2260                         </condition>
2261                 </rule>
2262                 <rule effect="deny">
2263                         <condition combine="and">
2264                                 <resource-match attr="resource-id">r45.1</resource-match>    
2265                         </condition>
2266                 </rule>
2267         </policy>
2268 </policy-set>
2269 <!---    test 45.2    (old name: test 205b -->
2270 <!--- two opposite rules put into one policy -->
2271 <!--- testing rules combining methods-->
2272 <!--- this case should have the result of deny-->
2273 <policy-set combine="first-matching-target">
2274         <target>
2275                 <subject>
2276                         <subject-match attr="id">s45.2</subject-match>
2277                 </subject>  
2278         </target>
2279         <policy combine="first-applicable">
2280                 <rule effect="deny">
2281                         <condition combine="and">
2282                                 <resource-match attr="resource-id">r45.2</resource-match>    
2283                         </condition>
2284                 </rule>
2285                 <rule effect="permit">
2286                         <condition combine="and">
2287                                 <resource-match attr="resource-id">r45.2</resource-match>    
2288                         </condition>
2289                 </rule>
2290         </policy>
2291 </policy-set>
2292
2293 <!---    test 46.1    (old name: test 206 -->
2294 <!--- two opposite rules put into one policy -->
2295
2296
2297 <policy-set combine="first-matching-target">
2298         <target>
2299                 <subject>
2300                         <subject-match attr="id">s46.1</subject-match>
2301                 </subject>  
2302         </target>
2303         <policy combine="permit-overrides">
2304                 <rule effect="deny">
2305                         <condition combine="and">
2306                                 <resource-match attr="resource-id">r46.1</resource-match>    
2307                         </condition>
2308                 </rule>
2309                 <rule effect="permit">
2310                         <condition combine="and">
2311                                 <resource-match attr="resource-id">r46.1</resource-match>    
2312                         </condition>
2313                 </rule>
2314         </policy>
2315 </policy-set>
2316 <!---    test 46.2    (old name: test 206b -->
2317 <!--- two opposite rules put into one policy -->
2318
2319
2320 <policy-set combine="first-matching-target">
2321         <target>
2322                 <subject>
2323                         <subject-match attr="id">s46.2</subject-match>
2324                 </subject>  
2325         </target>
2326         <policy combine="permit-overrides">
2327                 <rule effect="permit">
2328                         <condition combine="and">
2329                                 <resource-match attr="resource-id">r46.2</resource-match>    
2330                         </condition>
2331                 </rule>
2332                 <rule effect="deny">
2333                         <condition combine="and">
2334                                 <resource-match attr="resource-id">r46.2</resource-match>    
2335                         </condition>
2336                 </rule>
2337         </policy>
2338 </policy-set>
2339
2340 <!---    test 47.1    (old name: test 207 -->
2341 <!--- two opposite rules put into one policy -->
2342
2343
2344 <policy-set combine="first-matching-target">
2345         <target>
2346                 <subject>
2347                         <subject-match attr="id">s47.1</subject-match>
2348                 </subject>  
2349         </target>
2350         <policy combine="deny-overrides">
2351                 <rule effect="permit">
2352                         <condition combine="and">
2353                                 <resource-match attr="resource-id">r47.1</resource-match>    
2354                         </condition>
2355                 </rule>
2356                 <rule effect="deny">
2357                         <condition combine="and">
2358                                 <resource-match attr="resource-id">r47.1</resource-match>    
2359                         </condition>
2360                 </rule>
2361         </policy>
2362 </policy-set>
2363 <!---    test 47.2    (old name: test 207b -->
2364 <!--- two opposite rules put into one policy -->
2365
2366 <policy-set combine="first-matching-target">
2367         <target>
2368                 <subject>
2369                         <subject-match attr="id">s47.2</subject-match>
2370                 </subject>  
2371         </target>
2372         <policy combine="deny-overrides">
2373                 <rule effect="deny">
2374                         <condition combine="and">
2375                                 <resource-match attr="resource-id">r47.2</resource-match>    
2376                         </condition>
2377                 </rule>
2378                 <rule effect="permit">
2379                         <condition combine="and">
2380                                 <resource-match attr="resource-id">r47.2</resource-match>    
2381                         </condition>
2382                 </rule>
2383         </policy>
2384 </policy-set>
2385
2386
2387 <!---    test 48 (old name: test 101)-->
2388
2389 <policy-set combine="first-matching-target">
2390 <target>
2391 <subject>
2392 <subject-match attr="id">s48</subject-match>
2393 <subject-match attr="uri.host" match="www.test.pl"/>
2394
2395 </subject>
2396 </target>
2397 <policy>
2398 <rule effect="permit">
2399 <condition combine="and">
2400 <resource-match attr="resource-id" match="device:pim.contacts"/>
2401 <!--<subject-match attr="uri" match="http://www.test.pl:80"/>-->
2402 </condition>
2403 </rule>
2404 </policy>
2405 </policy-set>
2406
2407 </policy-set>
Domain: Web Framework / Uncategorized;