tests/ace/test-configuration/policy-wac-2.0.xml

   1 <policy-set id="Policy-1" combine="first-matching-target">
   2  <policy description="WAC">
   3
   4      <!-- permit access to private filesystem -->
   5      <rule effect="permit">
   6          <condition>
   7              <resource-match attr="device-cap" match="messaging.write"/>
   8          </condition>
   9      </rule>
  10      <!-- permit access to camera preview -->
  11      <rule effect="permit">
  12          <condition>
  13              <resource-match attr="device-cap" match="camera.show"/>
  14          </condition>
  15
  16      </rule>
  17      <!-- prompt-blanket access to IMEI -->
  18      <rule effect="prompt-blanket">
  19          <condition>
  20              <resource-match attr="device-cap" match="devicestatus.networkinfo"/>
  21              <resource-match attr="param:property" match="imei"/>
  22          </condition>
  23      </rule>
  24      <!-- prompt-session access to messging when roaming -->
  25      <rule effect="prompt-session">
  26          <condition>
  27              <resource-match attr="device-cap" match="messaging.send"/>
  28              <environment-match attr="roaming" match="true"/>
  29          </condition>
  30      </rule>
  31      <!-- prompt-session access to network when roaming -->
  32      <rule effect="prompt-session">
  33          <condition>
  34              <condition combine="or">
  35                  <resource-match attr="device-cap" match="XMLHttpRequest"/>
  36                  <resource-match attr="device-cap" match="externalNetworkAccess"/>
  37              </condition>
  38              <environment-match attr="roaming" match="true"/>
  39          </condition>
  40      </rule>
  41      <!-- prompt-blanket access to camera capture -->
  42      <rule effect="prompt-blanket">
  43          <condition>
  44              <resource-match attr="device-cap" match="camera.capture"/>
  45          </condition>
  46      </rule>
  47      <!-- prompt-blanket access to contacts -->
  48      <rule effect="prompt-blanket">
  49          <condition>
  50              <resource-match attr="device-cap" match="pim.contact.*"/>
  51          </condition>
  52      </rule>
  53      <!-- prompt-blanket access to calendar -->
  54      <rule effect="prompt-blanket">
  55          <condition>
  56              <resource-match attr="device-cap" match="pim.calendar.*"/>
  57          </condition>
  58      </rule>
  59      <!-- prompt-blanket access to task -->
  60      <rule effect="prompt-blanket">
  61          <condition>
  62              <resource-match attr="device-cap" match="pim.task.*"/>
  63          </condition>
  64      </rule>
  65      <!-- prompt-blanket access to devicestatus -->
  66      <rule effect="prompt-blanket">
  67          <condition>
  68              <resource-match attr="device-cap" match="devicestatus.*"/>
  69          </condition>
  70      </rule>
  71      <!-- prompt-blanket access to geolocation -->
  72      <rule effect="prompt-oneshot">
  73          <condition>
  74              <resource-match attr="device-cap" match="geolocation"/>
  75          </condition>
  76      </rule>
  77      <!-- prompt-blanket access to networking -->
  78      <rule effect="prompt-session">
  79          <condition combine="or">
  80              <resource-match attr="device-cap" match="XMLHttpRequest"/>
  81              <resource-match attr="device-cap" match="externalNetworkAccess"/>
  82          </condition>
  83      </rule>
  84      <!-- prompt-blanket access to filesystem -->
  85      <rule effect="prompt-blanket">
  86          <condition>
  87              <resource-match attr="device-cap" match="filesystem.*"/>
  88          </condition>
  89      </rule>
  90      <rule effect="deny">
  91          <condition>
  92              <resource-match attr="device-cap" match="messaging.subscribe"/>
  93          </condition>
  94      </rule>
  95      <!-- permit access to all remaining deviceapis -->
  96      <rule effect="permit">
  97          <condition>
  98              <resource-match attr="device-cap" match="*"/>
  99          </condition>
 100      </rule>
 101      <rule effect="permit"/>
 102 </policy>
 103 </policy-set>