tests/ace/test-configuration/attr_policy-example4.xml

   1 <policy-set id="Policy-3" combine="deny-overrides">
   2     <target>
   3         <subject>
   4             <subject-match attr="id" match="subject7" />
   5         </subject>
   6     </target>
   7     <policy>
   8         <rule effect="permit">
   9             <condition combine="and">
  10                 <resource-match attr="resource-id">
  11                     resource7
  12                 </resource-match>
  13                 <condition combine="and">
  14                     <condition combine="or">
  15                         <subject-match attr="version" match="7" />
  16                         <subject-match attr="version" match="6" />
  17                     </condition>
  18                     <resource-match attr="author" match="author2" />
  19                 </condition>
  20             </condition>
  21         </rule>
  22         <rule effect="permit">
  23             <condition combine="and">
  24                 <resource-match attr="resource-id">
  25                     resource7
  26                 </resource-match>
  27                 <condition combine="and">
  28                     <condition combine="or">
  29                         <subject-match attr="version" match="7" />
  30                         <subject-match attr="version" match="6" />
  31                     </condition>
  32                     <environment-match attr="author" match="author2" />
  33                 </condition>
  34             </condition>
  35         </rule>
  36
  37
  38     </policy>
  39     <policy>
  40         <rule effect="permit">
  41             <condition combine="and">
  42                 <resource-match attr="resource-id">
  43                     resource7
  44                 </resource-match>
  45                 <condition combine="or">
  46                     <condition combine="or">
  47                         <subject-match attr="version" match="1" />
  48                         <subject-match attr="version" match="2" />
  49                     </condition>
  50                     <resource-match attr="author" match="author3" />
  51                 </condition>
  52             </condition>
  53         </rule>
  54         <rule effect="permit">
  55             <condition combine="and">
  56                 <resource-match attr="resource-id">
  57                     resource7
  58                 </resource-match>
  59                 <condition combine="or">
  60                     <condition combine="or">
  61                         <subject-match attr="version" match="1" />
  62                         <subject-match attr="version" match="2" />
  63                     </condition>
  64                     <resource-match attr="author" match="author3" />
  65                 </condition>
  66             </condition>
  67         </rule>
  68
  69
  70
  71     </policy>
  72     <policy>
  73         <rule effect="deny">
  74             <condition combine="and">
  75                 <resource-match attr="resource-id">
  76                     resource7
  77                 </resource-match>
  78                 <condition combine="or">
  79                     <condition combine="or">
  80                         <subject-match attr="version" match="1" />
  81                         <environment-match attr="version" match="2" />
  82                     </condition>
  83                     <resource-match attr="author" match="author3" />
  84                 </condition>
  85             </condition>
  86         </rule>
  87          <rule effect="deny">
  88             <condition combine="and">
  89                 <resource-match attr="resource-id">
  90                     resource7
  91                 </resource-match>
  92                 <condition combine="or">
  93                     <condition combine="or">
  94                         <environment-match attr="ver" match="1" />
  95                         <subject-match attr="version" match="2" />
  96                     </condition>
  97                     <resource-match attr="author" match="author3" />
  98                 </condition>
  99             </condition>
 100         </rule>
 101    </policy>
 102  </policy-set>