tests/ace/test-configuration/interceptpolicy.xml

   1  <policy-set id="Policy-1" combine="first-matching-target">
   2
   3         <policy-set combine="deny-overrides" >
   4             <target>
   5                 <subject>
   6                     <subject-match attr="JilSecurityDomain">
   7                         Unidentified
   8                     </subject-match>
   9                 </subject>
  10             </target>
  11             <policy combine="deny-overrides">
  12                 <rule effect="deny">
  13                     <condition combine="and" >
  14                         <resource-match attr="resource-id">
  15                             http://jil.org/jil/api/1.1/device
  16                         </resource-match>
  17                         <resource-match attr="param:function">
  18                             getAvailableApplications
  19                         </resource-match>
  20                     </condition>
  21                 </rule>
  22                 <rule effect="prompt-oneshot">
  23                     <condition combine="or" >
  24                         <resource-match attr="resource-id">
  25                             http://jil.org/jil/api/1.1/addressbookitem.AddressBookItem.update
  26                         </resource-match>
  27                         <resource-match attr="resource-id">
  28                             http://jil.org/jil/api/1.1/multimedia.Camera.captureImage
  29                         </resource-match>
  30                         <resource-match attr="resource-id">
  31                             http://jil.org/jil/api/1.1/device.Device.launchApplication
  32                         </resource-match>
  33                         <resource-match attr="resource-id">
  34                             DeviceStateInfo.requestPositionInfo
  35                         </resource-match>
  36                         <resource-match attr="resource-id">
  37                             http://jil.org/jil/api/1.1/messaging.Messaging.sendMessage
  38                         </resource-match>
  39                     </condition>
  40                 </rule>
  41                 <rule effect="prompt-session">
  42                     <condition combine="or" >
  43                         <resource-match attr="resource-id">
  44                             http://jil.org/jil/api/1.1.1/pim.PIM.findAddressBookItems
  45                         </resource-match>
  46                         <resource-match attr="resource-id">
  47                             http://jil.org/jil/api/1.1.1/pim.PIM.getAddressBookItem
  48                         </resource-match>
  49                         <resource-match attr="resource-id">
  50                             http://jil.org/jil/api/1.1.1/pim.PIM.getAddressBookItemsCount
  51                         </resource-match>
  52                     </condition>
  53                 </rule>
  54                 <!-- If the resource was not specified above then the access is unrestricted -->
  55                 <rule effect="permit">
  56                     <condition combine="or" >
  57                         <resource-match attr="resource-id">
  58                             Device.PositionInfo
  59                         </resource-match>
  60                         <resource-match attr="resource-id">
  61                             http://jil.org/jil/api/1.1/addressbookitem.AddressBookItem.getAttributeValue
  62                         </resource-match>
  63                         <resource-match attr="resource-id">
  64                             http://jil.org/jil/api/1.1/addressbookitem.AddressBookItem.getAvailableAttributes
  65                         </resource-match>
  66                         <resource-match attr="resource-id">
  67                             http://jil.org/jil/api/1.1/addressbookitem.AddressBookItem.setAttributeValue
  68                         </resource-match>
  69                         <resource-match attr="resource-id">
  70                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.open
  71                         </resource-match>
  72                         <resource-match attr="resource-id">
  73                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.play
  74                         </resource-match>
  75                         <resource-match attr="resource-id">
  76                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.pause
  77                         </resource-match>
  78                         <resource-match attr="resource-id">
  79                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.resume
  80                         </resource-match>
  81                         <resource-match attr="resource-id">
  82                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.stop
  83                         </resource-match>
  84                         <resource-match attr="resource-id">
  85                             AudioPlayer.onStateChange
  86                         </resource-match>
  87                         <resource-match attr="resource-id">
  88                             http://jil.org/jil/api/1.1/multimedia.Camera.onCameraCaptured
  89                         </resource-match>
  90                         <resource-match attr="resource-id">
  91                             http://jil.org/jil/api/1.1/multimedia.Camera.setWindow
  92                         </resource-match>
  93                         <resource-match attr="resource-id">
  94                             Device.PositionInfo
  95                         </resource-match>
  96                         <resource-match attr="resource-id">
  97                             Device.DeviceStateInfo
  98                         </resource-match>
  99                         <resource-match attr="resource-id">
 100                             DeviceStateInfo.onPositionRetrieved
 101                         </resource-match>
 102                         <resource-match attr="resource-id">
 103                             http://jil.org/jil/api/1.1/messaging.Messaging.createMessage
 104                         </resource-match>
 105                         <resource-match attr="resource-id">
 106                             Messaging.onMessageSendingFailure
 107                         </resource-match>
 108                         <resource-match attr="resource-id">
 109                             Multimedia.getVolume
 110                         </resource-match>
 111                         <resource-match attr="resource-id">
 112                             Multimedia.stopAll
 113                         </resource-match>
 114                         <resource-match attr="resource-id">
 115                             Multimedia.isAudioPlaying
 116                         </resource-match>
 117                         <resource-match attr="resource-id">
 118                             http://jil.org/jil/api/1.1.1/pim.PIM.createAddressBookItem
 119                         </resource-match>
 120                         <resource-match attr="resource-id">
 121                             PIM.onAddressBookItemFound
 122                         </resource-match>
 123
 124                         <!-- This part contains api-features defined in WAC1.0 -->
 125
 126                         <resource-match attr="resource-id">
 127                             http://jil.org/jil/api/1.1/accelerometerinfo
 128                         </resource-match>
 129                         <resource-match attr="resource-id">
 130                             http://jil.org/jil/api/1.1/addressbookitem
 131                         </resource-match>
 132                         <resource-match attr="resource-id">
 133                             http://jil.org/jil/api/1.1.5/applicationtypes
 134                         </resource-match>
 135                         <resource-match attr="resource-id">
 136                             http://jil.org/jil/api/1.1.2/camera
 137                         </resource-match>
 138                         <resource-match attr="resource-id">
 139                             http://jil.org/jil/api/1.1/device
 140                         </resource-match>
 141                         <resource-match attr="resource-id">
 142                             http://jil.org/jil/api/1.1/devicestateinfo
 143                         </resource-match>
 144                         <resource-match attr="resource-id">
 145                             http://jil.org/jil/api/1.1.5/exception
 146                         </resource-match>
 147                         <resource-match attr="resource-id">
 148                             http://jil.org/jil/api/1.1.5/exceptiontypes
 149                         </resource-match>
 150                         <resource-match attr="resource-id">
 151                             http://jil.org/jil/api/1.1/message
 152                         </resource-match>
 153                         <resource-match attr="resource-id">
 154                             http://jil.org/jil/api/1.1/messagetypes
 155                         </resource-match>
 156                         <resource-match attr="resource-id">
 157                             http://jil.org/jil/api/1.1/messaging
 158                         </resource-match>
 159                         <resource-match attr="resource-id">
 160                             http://jil.org/jil/api/1.1/multimedia
 161                         </resource-match>
 162                         <resource-match attr="resource-id">
 163                             http://jil.org/jil/api/1.1.1/pim
 164                         </resource-match>
 165                         <resource-match attr="resource-id">
 166                             http://jil.org/jil/api/1.1/positioninfo
 167                         </resource-match>
 168                         <resource-match attr="resource-id">
 169                             http://jil.org/jil/api/1.1/widget
 170                         </resource-match>
 171                     </condition>
 172                 </rule>
 173                 <rule effect="permit" />
 174             </policy>
 175         </policy-set>
 176
 177         <policy-set combine="deny-overrides" >
 178             <target>
 179                 <subject>
 180                     <subject-match attr="JilSecurityDomain">
 181                         Identified
 182                     </subject-match>
 183                 </subject>
 184             </target>
 185             <policy combine="deny-overrides">
 186                 <rule effect="prompt-session">
 187                     <condition combine="or" >
 188                         <resource-match attr="resource-id">
 189                             http://jil.org/jil/api/1.1/addressbookitem.AddressBookItem.update
 190                         </resource-match>
 191                         <resource-match attr="resource-id">
 192                             DeviceStateInfo.requestPositionInfo
 193                         </resource-match>
 194                     </condition>
 195                 </rule>
 196                 <rule effect="prompt-blanket">
 197                     <condition combine="or" >
 198                         <resource-match attr="resource-id">
 199                             http://jil.org/jil/api/1.1/device.Device.launchApplication
 200                         </resource-match>
 201                         <resource-match attr="resource-id">
 202                             http://jil.org/jil/api/1.1/multimedia.Camera.captureImage
 203                         </resource-match>
 204                         <resource-match attr="resource-id">
 205                             http://jil.org/jil/api/1.1/messaging.Messaging.sendMessage
 206                         </resource-match>
 207                         <resource-match attr="resource-id">
 208                             http://jil.org/jil/api/1.1.1/pim.PIM.findAddressBookItems
 209                         </resource-match>
 210                         <resource-match attr="resource-id">
 211                             http://jil.org/jil/api/1.1.1/pim.PIM.getAddressBookItem
 212                         </resource-match>
 213                         <resource-match attr="resource-id">
 214                             http://jil.org/jil/api/1.1.1/pim.PIM.getAddressBookItemsCount
 215                         </resource-match>
 216                     </condition>
 217                 </rule>
 218                 <!-- If the resource was not specified above then the access is unrestricted -->
 219                 <rule effect="permit">
 220                     <condition combine="or" >
 221                         <resource-match attr="resource-id">
 222                             http://jil.org/jil/api/1.1/device.Device.getAvailableApplications
 223                         </resource-match>
 224                         <resource-match attr="resource-id">
 225                             http://jil.org/jil/api/1.1/addressbookitem.AddressBookItem.getAttributeValue
 226                         </resource-match>
 227                         <resource-match attr="resource-id">
 228                             http://jil.org/jil/api/1.1/addressbookitem.AddressBookItem.getAvailableAttributes
 229                         </resource-match>
 230                         <resource-match attr="resource-id">
 231                             http://jil.org/jil/api/1.1/addressbookitem.AddressBookItem.setAttributeValue
 232                         </resource-match>
 233                         <resource-match attr="resource-id">
 234                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.open
 235                         </resource-match>
 236                         <resource-match attr="resource-id">
 237                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.play
 238                         </resource-match>
 239                         <resource-match attr="resource-id">
 240                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.pause
 241                         </resource-match>
 242                         <resource-match attr="resource-id">
 243                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.resume
 244                         </resource-match>
 245                         <resource-match attr="resource-id">
 246                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.stop
 247                         </resource-match>
 248                         <resource-match attr="resource-id">
 249                             AudioPlayer.onStateChange
 250                         </resource-match>
 251                         <resource-match attr="resource-id">
 252                             http://jil.org/jil/api/1.1/multimedia.Camera.onCameraCaptured
 253                         </resource-match>
 254                         <resource-match attr="resource-id">
 255                             http://jil.org/jil/api/1.1/multimedia.Camera.setWindow
 256                         </resource-match>
 257                         <resource-match attr="resource-id">
 258                             Device.PositionInfo
 259                         </resource-match>
 260                         <resource-match attr="resource-id">
 261                             Device.DeviceStateInfo
 262                         </resource-match>
 263                         <resource-match attr="resource-id">
 264                             DeviceStateInfo.onPositionRetrieved
 265                         </resource-match>
 266                         <resource-match attr="resource-id">
 267                             http://jil.org/jil/api/1.1/messaging.Messaging.createMessage
 268                         </resource-match>
 269                         <resource-match attr="resource-id">
 270                             Messaging.onMessageSendingFailure
 271                         </resource-match>
 272                         <resource-match attr="resource-id">
 273                             Multimedia.getVolume
 274                         </resource-match>
 275                         <resource-match attr="resource-id">
 276                             Multimedia.stopAll
 277                         </resource-match>
 278                         <resource-match attr="resource-id">
 279                             Multimedia.isAudioPlaying
 280                         </resource-match>
 281                         <resource-match attr="resource-id">
 282                             http://jil.org/jil/api/1.1.1/pim.PIM.createAddressBookItem
 283                         </resource-match>
 284                         <resource-match attr="resource-id">
 285                             PIM.onAddressBookItemFound
 286                         </resource-match>
 287
 288                         <!-- This part contains api-features defined in WAC1.0 -->
 289
 290                         <resource-match attr="resource-id">
 291                             http://jil.org/jil/api/1.1/accelerometerinfo
 292                         </resource-match>
 293                         <resource-match attr="resource-id">
 294                             http://jil.org/jil/api/1.1/addressbookitem
 295                         </resource-match>
 296                         <resource-match attr="resource-id">
 297                             http://jil.org/jil/api/1.1.5/applicationtypes
 298                         </resource-match>
 299                         <resource-match attr="resource-id">
 300                             http://jil.org/jil/api/1.1.2/camera
 301                         </resource-match>
 302                         <resource-match attr="resource-id">
 303                             http://jil.org/jil/api/1.1/device
 304                         </resource-match>
 305                         <resource-match attr="resource-id">
 306                             http://jil.org/jil/api/1.1/devicestateinfo
 307                         </resource-match>
 308                         <resource-match attr="resource-id">
 309                             http://jil.org/jil/api/1.1.5/exception
 310                         </resource-match>
 311                         <resource-match attr="resource-id">
 312                             http://jil.org/jil/api/1.1.5/exceptiontypes
 313                         </resource-match>
 314                         <resource-match attr="resource-id">
 315                             http://jil.org/jil/api/1.1/message
 316                         </resource-match>
 317                         <resource-match attr="resource-id">
 318                             http://jil.org/jil/api/1.1/messagetypes
 319                         </resource-match>
 320                         <resource-match attr="resource-id">
 321                             http://jil.org/jil/api/1.1/messaging
 322                         </resource-match>
 323                         <resource-match attr="resource-id">
 324                             http://jil.org/jil/api/1.1/multimedia
 325                         </resource-match>
 326                         <resource-match attr="resource-id">
 327                             http://jil.org/jil/api/1.1.1/pim
 328                         </resource-match>
 329                         <resource-match attr="resource-id">
 330                             http://jil.org/jil/api/1.1/positioninfo
 331                         </resource-match>
 332                         <resource-match attr="resource-id">
 333                             http://jil.org/jil/api/1.1/widget
 334                         </resource-match>
 335                     </condition>
 336                 </rule>
 337                 <rule effect="permit" />
 338             </policy>
 339         </policy-set>
 340
 341         <policy-set combine="deny-overrides" >
 342             <target>
 343                 <subject>
 344                     <subject-match attr="JilSecurityDomain">
 345                         Operator
 346                     </subject-match>
 347                 </subject>
 348             </target>
 349             <policy combine="deny-overrides">
 350                 <rule effect="permit">
 351                     <condition combine="or" >
 352                         <resource-match attr="resource-id">
 353                             http://jil.org/jil/api/1.1/device.Device.launchApplication
 354                         </resource-match>
 355                         <resource-match attr="resource-id">
 356                             DeviceStateInfo.requestPositionInfo
 357                         </resource-match>
 358                         <resource-match attr="resource-id">
 359                             http://jil.org/jil/api/1.1/addressbookitem.AddressBookItem.update
 360                         </resource-match>
 361                         <resource-match attr="resource-id">
 362                             http://jil.org/jil/api/1.1/device.Device.getAvailableApplications
 363                         </resource-match>
 364                         <resource-match attr="resource-id">
 365                             http://jil.org/jil/api/1.1/addressbookitem.AddressBookItem.getAttributeValue
 366                         </resource-match>
 367                         <resource-match attr="resource-id">
 368                             http://jil.org/jil/api/1.1/addressbookitem.AddressBookItem.getAvailableAttributes
 369                         </resource-match>
 370                         <resource-match attr="resource-id">
 371                             http://jil.org/jil/api/1.1/addressbookitem.AddressBookItem.setAttributeValue
 372                         </resource-match>
 373                         <resource-match attr="resource-id">
 374                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.open
 375                         </resource-match>
 376                         <resource-match attr="resource-id">
 377                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.play
 378                         </resource-match>
 379                         <resource-match attr="resource-id">
 380                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.pause
 381                         </resource-match>
 382                         <resource-match attr="resource-id">
 383                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.resume
 384                         </resource-match>
 385                         <resource-match attr="resource-id">
 386                             http://jil.org/jil/api/1.1/multimedia.AudioPlayer.stop
 387                         </resource-match>
 388                         <resource-match attr="resource-id">
 389                             AudioPlayer.onStateChange
 390                         </resource-match>
 391                         <resource-match attr="resource-id">
 392                             http://jil.org/jil/api/1.1/multimedia.Camera.onCameraCaptured
 393                         </resource-match>
 394                         <resource-match attr="resource-id">
 395                             http://jil.org/jil/api/1.1/multimedia.Camera.setWindow
 396                         </resource-match>
 397                         <resource-match attr="resource-id">
 398                             http://jil.org/jil/api/1.1/multimedia.Camera.captureImage
 399                         </resource-match>
 400                         <resource-match attr="resource-id">
 401                             Device.PositionInfo
 402                         </resource-match>
 403                         <resource-match attr="resource-id">
 404                             Device.DeviceStateInfo
 405                         </resource-match>
 406                         <resource-match attr="resource-id">
 407                             DeviceStateInfo.onPositionRetrieved
 408                         </resource-match>
 409                         <resource-match attr="resource-id">
 410                             http://jil.org/jil/api/1.1/messaging.Messaging.createMessage
 411                         </resource-match>
 412                         <resource-match attr="resource-id">
 413                             http://jil.org/jil/api/1.1/messaging.Messaging.sendMessage
 414                         </resource-match>
 415                         <resource-match attr="resource-id">
 416                             Messaging.onMessageSendingFailure
 417                         </resource-match>
 418                         <resource-match attr="resource-id">
 419                             Multimedia.getVolume
 420                         </resource-match>
 421                         <resource-match attr="resource-id">
 422                             Multimedia.stopAll
 423                         </resource-match>
 424                         <resource-match attr="resource-id">
 425                             Multimedia.isAudioPlaying
 426                         </resource-match>
 427                         <resource-match attr="resource-id">
 428                             http://jil.org/jil/api/1.1.1/pim.PIM.createAddressBookItem
 429                         </resource-match>
 430                         <resource-match attr="resource-id">
 431                             PIM.onAddressBookItemFound
 432                         </resource-match>
 433                         <resource-match attr="resource-id">
 434                             http://jil.org/jil/api/1.1.1/pim.PIM.findAddressBookItems
 435                         </resource-match>
 436                         <resource-match attr="resource-id">
 437                             http://jil.org/jil/api/1.1.1/pim.PIM.getAddressBookItem
 438                         </resource-match>
 439                         <resource-match attr="resource-id">
 440                             http://jil.org/jil/api/1.1.1/pim.PIM.getAddressBookItemsCount
 441                         </resource-match>
 442
 443                         <!-- This part contains api-features defined in WAC1.0 -->
 444
 445                         <resource-match attr="resource-id">
 446                             http://jil.org/jil/api/1.1/accelerometerinfo
 447                         </resource-match>
 448                         <resource-match attr="resource-id">
 449                             http://jil.org/jil/api/1.1/addressbookitem
 450                         </resource-match>
 451                         <resource-match attr="resource-id">
 452                             http://jil.org/jil/api/1.1.5/applicationtypes
 453                         </resource-match>
 454                         <resource-match attr="resource-id">
 455                             http://jil.org/jil/api/1.1.2/camera
 456                         </resource-match>
 457                         <resource-match attr="resource-id">
 458                             http://jil.org/jil/api/1.1/device
 459                         </resource-match>
 460                         <resource-match attr="resource-id">
 461                             http://jil.org/jil/api/1.1/devicestateinfo
 462                         </resource-match>
 463                         <resource-match attr="resource-id">
 464                             http://jil.org/jil/api/1.1.5/exception
 465                         </resource-match>
 466                         <resource-match attr="resource-id">
 467                             http://jil.org/jil/api/1.1.5/exceptiontypes
 468                         </resource-match>
 469                         <resource-match attr="resource-id">
 470                             http://jil.org/jil/api/1.1/message
 471                         </resource-match>
 472                         <resource-match attr="resource-id">
 473                             http://jil.org/jil/api/1.1/messagetypes
 474                         </resource-match>
 475                         <resource-match attr="resource-id">
 476                             http://jil.org/jil/api/1.1/messaging
 477                         </resource-match>
 478                         <resource-match attr="resource-id">
 479                             http://jil.org/jil/api/1.1/multimedia
 480                         </resource-match>
 481                         <resource-match attr="resource-id">
 482                             http://jil.org/jil/api/1.1.1/pim
 483                         </resource-match>
 484                         <resource-match attr="resource-id">
 485                             http://jil.org/jil/api/1.1/positioninfo
 486                         </resource-match>
 487                         <resource-match attr="resource-id">
 488                             http://jil.org/jil/api/1.1/widget
 489                         </resource-match>
 490                     </condition>
 491                 </rule>
 492                 <rule effect="permit" />
 493             </policy>
 494         </policy-set>
 495  </policy-set>