tests/ace/test-configuration/CMTest/policyTest3.xml

   1 <!DOCTYPE signed-policy SYSTEM "bondixml.dtd">
   2
   3 <signed-policy>
   4
   5  <Signature Id="SignatureExample" xmlns="http://www.w3.org/2000/09/xmldsig#">
   6    <SignedInfo>
   7    <CanonicalizationMethod Algorithm="http://www.w2.org/2006/12/xml-c14n11"/>
   8    <SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
   9    <Reference URI="Policy-1">
  10      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  11      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  12    </Reference>
  13    <Reference URI="Policy-2">
  14      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  15      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  16    </Reference>
  17    <Reference URI="Policy-3">
  18      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  19      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  20    </Reference>
  21    <Reference URI="Policy-4">
  22      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  23      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  24    </Reference>
  25    <Reference URI="Policy-5">
  26      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  27      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  28    </Reference>
  29    <Reference URI="Policy-6">
  30      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  31      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  32    </Reference>
  33    <Reference URI="Policy-7">
  34      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  35      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  36    </Reference>
  37    <Reference URI="Policy-8">
  38      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  39      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  40    </Reference>
  41    <Reference URI="Policy-9">
  42      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  43      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  44    </Reference>
  45    <Reference URI="Policy-10">
  46      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  47      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  48    </Reference>
  49    <Reference URI="Policy-11">
  50      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  51      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  52    </Reference>
  53    <Reference URI="Policy-12">
  54      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  55      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  56    </Reference>
  57    <Reference URI="Policy-13">
  58      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  59      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  60    </Reference>
  61    <Reference URI="Policy-14">
  62      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  63      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  64    </Reference>
  65    <Reference URI="Policy-15">
  66      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  67      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  68    </Reference>
  69    <Reference URI="Policy-16">
  70      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  71      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  72    </Reference>
  73    <Reference URI="Policy-17">
  74      <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  75      <DigestValue>dGhpcyBpcyBub3QgYSBzaWduYXR1cmUK...</DigestValue>
  76    </Reference>
  77  </SignedInfo>
  78    <SignatureValue>asdfkjlhxvczxnbcvnjahfjhsdfklahfdas</SignatureValue>
  79    <KeyInfo>
  80      <KeyValue>
  81        <DSAKeyValue>
  82          <P> PValue </P><Q> QValue </Q><G> Gvalue </G><Y> laj?</Y>
  83        </DSAKeyValue>
  84        <RSAKeyValue>
  85            <Modulus>
  86                modulus
  87            </Modulus>
  88            <Exponent>
  89                exponent
  90            </Exponent>
  91        </RSAKeyValue>
  92      </KeyValue>
  93      <X509Data>
  94          <X509SubjectName> Subject name </X509SubjectName>
  95          <X509SKI> SKI </X509SKI>
  96      </X509Data>
  97    </KeyInfo>
  98  </Signature>
  99
 100
 101
 102 <policy-set id="Policy-1">
 103 <policy-set combine="first-matching-target">
 104     <target>
 105         <subject>
 106             <subject-match attr="id">
 107                 subject
 108             </subject-match>
 109         </subject>
 110         <subject>
 111             <subject-match attr="id" match="subject2" />
 112         </subject>
 113     </target>
 114     <policy>
 115         <target>
 116             <subject>
 117                 <subject-match attr="id" match="subject" />
 118             </subject>
 119         </target>
 120         <rule effect="permit">
 121             <condition>
 122                 <resource-match attr="resource-id">
 123                     resource
 124                 </resource-match>
 125                 <subject-match attr="version" match="3" />
 126             </condition>
 127         </rule>
 128     </policy>
 129     <policy>
 130         <target>
 131             <subject>
 132                 <subject-match attr="id" match="subject2" />
 133             </subject>
 134         </target>
 135         <rule effect="deny">
 136             <condition>
 137                 <resource-match attr="resource-id">
 138                     resource
 139                 </resource-match>
 140             </condition>
 141         </rule>
 142     </policy>
 143 </policy-set>
 144 <policy-set >
 145     <target>
 146         <subject>
 147             <subject-match attr="id">
 148                 subject3
 149             </subject-match>
 150         </subject>
 151         <subject>
 152             <subject-match attr="id" match="subject4" />
 153         </subject>
 154     </target>
 155     <policy>
 156         <rule effect="permit">
 157             <condition>
 158                 <resource-match attr="resource-id">
 159                     resource2
 160                 </resource-match>
 161             </condition>
 162         </rule>
 163     </policy>
 164     <policy>
 165         <rule effect="deny">
 166             <condition>
 167                 <resource-match attr="resource-id">
 168                     resource2
 169                 </resource-match>
 170             </condition>
 171         </rule>
 172     </policy>
 173     <policy>
 174         <target>
 175             <subject>
 176                 <subject-match attr="id">
 177                     subject4
 178                 </subject-match>
 179                 <subject-match attr="version" match="4" />
 180             </subject>
 181         </target>
 182         <rule effect="permit">
 183             <condition>
 184                 <resource-match attr="resource-id">
 185                     resource4
 186                 </resource-match>
 187             </condition>
 188         </rule>
 189     </policy>
 190 </policy-set>
 191 <policy-set id="Policy-2" combine="first-matching-target">
 192     <target>
 193         <subject>
 194             <subject-match attr="id" match="subject5" />
 195         </subject>
 196         <subject>
 197             <subject-match attr="id" match="subject6" />
 198         </subject>
 199     </target>
 200     <policy>
 201         <target>
 202             <subject>
 203                 <subject-match attr="id">
 204                     subject5
 205                 </subject-match>
 206             </subject>
 207         </target>
 208         <rule effect="permit">
 209             <condition combine="and">
 210                 <resource-match attr="resource-id">
 211                     resource5
 212                 </resource-match>
 213                 <subject-match attr="version" match="5" />
 214             </condition>
 215         </rule>
 216     </policy>
 217     <policy>
 218         <rule effect="permit">
 219             <condition combine="or">
 220                 <resource-match attr="resource-id">
 221                     resource6
 222                 </resource-match>
 223                 <subject-match attr="version" match="6" />
 224             </condition>
 225         </rule>
 226     </policy>
 227 </policy-set>
 228
 229 <policy-set id="Policy-3" combine="deny-overrides">
 230     <target>
 231         <subject>
 232             <subject-match attr="id" match="subject7" />
 233         </subject>
 234     </target>
 235     <policy>
 236         <rule effect="permit">
 237             <condition combine="and">
 238                 <resource-match attr="resource-id">
 239                     resource7
 240                 </resource-match>
 241                 <condition combine="and">
 242                     <condition combine="or">
 243                         <subject-match attr="version" match="7" />
 244                         <subject-match attr="version" match="6" />
 245                     </condition>
 246                     <resource-match attr="author" match="author2" />
 247                 </condition>
 248             </condition>
 249         </rule>
 250     </policy>
 251     <policy>
 252         <rule effect="permit">
 253             <condition combine="and">
 254                 <resource-match attr="resource-id">
 255                     resource7
 256                 </resource-match>
 257                 <condition combine="or">
 258                     <condition combine="or">
 259                         <subject-match attr="version" match="1" />
 260                         <subject-match attr="version" match="2" />
 261                     </condition>
 262                     <resource-match attr="author" match="author3" />
 263                 </condition>
 264             </condition>
 265         </rule>
 266     </policy>
 267     <policy>
 268         <rule effect="deny">
 269             <condition combine="and">
 270                 <resource-match attr="resource-id">
 271                     resource7
 272                 </resource-match>
 273                 <condition combine="or">
 274                     <condition combine="or">
 275                         <subject-match attr="version" match="1" />
 276                         <subject-match attr="version" match="2" />
 277                     </condition>
 278                     <resource-match attr="author" match="author3" />
 279                 </condition>
 280             </condition>
 281         </rule>
 282     </policy>
 283  </policy-set>
 284
 285 <policy-set id="Policy-4" combine="first-matching-target">
 286         <target>
 287                 <subject>
 288                         <subject-match attr="id">s8a</subject-match>
 289                 </subject>
 290         </target>
 291         <policy>
 292                 <rule effect="permit">
 293                         <condition combine="and">
 294                                 <resource-match attr="resource-id">r8</resource-match>
 295                                 <resource-match attr="r8v1" match="1" />
 296                         </condition>
 297         </rule>
 298         </policy>
 299         <policy>
 300                 <rule effect="deny">
 301                         <condition combine="and">
 302                                 <resource-match attr="resource-id">r8</resource-match>
 303                                 <resource-match attr="r8v2" match="2" />
 304                         </condition>
 305         </rule>
 306         </policy>
 307 </policy-set>
 308
 309 <policy-set id="Policy-5" combine="first-matching-target">
 310         <target>
 311                 <subject>
 312                         <subject-match attr="id">s8b</subject-match>
 313                 </subject>
 314         </target>
 315         <policy>
 316                 <rule effect="deny">
 317                         <condition combine="and">
 318                                 <resource-match attr="resource-id">r8</resource-match>
 319                                 <resource-match attr="r8v2" match="2" />
 320                         </condition>
 321         </rule>
 322         </policy>
 323         <policy>
 324                 <rule effect="permit">
 325                         <condition combine="and">
 326                                 <resource-match attr="resource-id">r8</resource-match>
 327                                 <resource-match attr="r8v1" match="1" />
 328                         </condition>
 329         </rule>
 330     </policy>
 331 </policy-set>
 332
 333 <policy-set id="Policy-6" combine="first-matching-target">
 334         <target>
 335                 <subject>
 336                         <subject-match attr="id">s8c</subject-match>
 337                 </subject>
 338         </target>
 339         <policy>
 340                 <rule effect="permit">
 341                         <condition combine="and">
 342                                 <resource-match attr="resource-id">r8</resource-match>
 343                                 <resource-match attr="r8v1" match="1" />
 344                                 <resource-match attr="r8v2" match="1" />
 345                         </condition>
 346         </rule>
 347     </policy>
 348         <policy>
 349                 <rule effect="deny" />
 350         </policy>
 351 </policy-set>
 352
 353 <policy-set id="Policy-7" combine="first-matching-target">
 354         <target>
 355                 <subject>
 356                         <subject-match attr="id">s9a</subject-match>
 357                 </subject>
 358         </target>
 359         <policy>
 360                 <rule effect="permit">
 361                         <condition combine="and">
 362                                 <resource-match attr="resource-id">r9</resource-match>
 363                                 <resource-match attr="r9a.scheme" match="http://onet.pl:80/test.html" />
 364                         </condition>
 365         </rule>
 366         </policy>
 367         <policy>
 368                 <rule effect="deny">
 369                         <condition combine="and">
 370                                 <resource-match attr="resource-id">r9</resource-match>
 371                                 <resource-match attr="r9a" match="*" func="glob"/>
 372                         </condition>
 373         </rule>
 374     </policy>
 375 </policy-set>
 376
 377 <policy-set id="Policy-8" combine="first-matching-target">
 378         <target>
 379                 <subject>
 380                         <subject-match attr="id">s9b</subject-match>
 381                 </subject>
 382         </target>
 383         <policy>
 384                 <rule effect="deny">
 385                         <condition combine="and">
 386                                 <resource-match attr="resource-id">r9</resource-match>
 387                                 <resource-match attr="r9b.authority" match="http://onet.pl:80/test.html" />
 388                         </condition>
 389         </rule>
 390         </policy>
 391         <policy>
 392                 <rule effect="permit">
 393                         <condition combine="and">
 394                                 <resource-match attr="resource-id">r9</resource-match>
 395                                 <resource-match attr="r9b" match="777" func="equal" />
 396                         </condition>
 397         </rule>
 398     </policy>
 399 </policy-set>
 400
 401 <policy-set  id="Policy-9"  combine="first-matching-target">
 402         <target>
 403                 <subject>
 404                         <subject-match attr="id">s9c</subject-match>
 405         </subject>
 406         </target>
 407         <policy>
 408                 <rule effect="deny">
 409                         <condition combine="and">
 410                                 <resource-match attr="resource-id">r9</resource-match>
 411                                 <resource-match attr="r9c.scheme" match="http" />
 412                         </condition>
 413         </rule>
 414         </policy>
 415
 416         <policy>
 417                 <rule effect="deny">
 418                         <condition combine="and">
 419                                 <resource-match attr="resource-id">r9</resource-match>
 420                                 <resource-match attr="r9c.authority" match="onet.pl" />
 421                         </condition>
 422         </rule>
 423         </policy>
 424
 425         <policy>
 426                 <rule effect="permit">
 427                         <condition combine="and">
 428                                 <resource-match attr="resource-id">r9</resource-match>
 429                                 <resource-match attr="r9c.scheme-authority" match="http://onet.pl" />
 430                         </condition>
 431         </rule>
 432         </policy>
 433         <policy>
 434                 <rule effect="deny">
 435                         <condition combine="and">
 436                                 <resource-match attr="resource-id">r9</resource-match>
 437                                 <resource-match attr="r9c" match="*" func="glob" />
 438                         </condition>
 439         </rule>
 440     </policy>
 441 </policy-set>
 442
 443 <policy-set  id="Policy-10" combine="first-matching-target">
 444         <target>
 445                 <subject>
 446                         <subject-match attr="id">s9d</subject-match>
 447         </subject>
 448     </target>
 449         <policy>
 450                 <rule effect="deny">
 451                         <condition combine="and">
 452                                 <resource-match attr="resource-id">r9</resource-match>
 453                                 <resource-match attr="r9d.scheme" match="http://onet.pl:80/test.html" />
 454                         </condition>
 455         </rule>
 456         </policy>
 457         <policy>
 458                 <rule effect="deny">
 459                         <condition combine="and">
 460                                 <resource-match attr="resource-id">r9</resource-match>
 461                                 <resource-match attr="r9d.authority" match="http://onet.pl:80/test.html" />
 462                         </condition>
 463         </rule>
 464         </policy>
 465         <policy>
 466                 <rule effect="deny">
 467                         <condition combine="and">
 468                                 <resource-match attr="resource-id">r9</resource-match>
 469                                 <resource-match attr="r9d" match="*" func="glob" />
 470                         </condition>
 471         </rule>
 472         </policy>
 473         <policy>
 474                 <rule effect="permit">
 475                         <condition combine="and">
 476                                 <resource-match attr="resource-id">r9</resource-match>
 477                                 <resource-match attr="r9d.scheme-authority" match="http://onet.pl:80/test.html" />
 478                         </condition>
 479         </rule>
 480     </policy>
 481 </policy-set>
 482
 483 <policy-set id="Policy-11" combine="first-matching-target">
 484         <target>
 485                 <subject>
 486                         <subject-match attr="id">s9e</subject-match>
 487         </subject>
 488     </target>
 489         <policy>
 490                 <rule effect="deny">
 491                         <condition combine="and">
 492                                 <resource-match attr="resource-id">r9</resource-match>
 493                                 <resource-match attr="r9e.host" match="http://onet.pl:80/test.html" />
 494                         </condition>
 495         </rule>
 496         </policy>
 497         <policy>
 498                 <rule effect="permit">
 499                         <condition combine="and">
 500                                 <resource-match attr="resource-id">r9</resource-match>
 501                                 <resource-match attr="r9e" match="*" func="glob"/>
 502                         </condition>
 503         </rule>
 504     </policy>
 505 </policy-set>
 506
 507 <policy-set  id="Policy-12" combine="first-matching-target">
 508         <target>
 509                 <subject>
 510                         <subject-match attr="id">s9f</subject-match>
 511                 </subject>
 512         </target>
 513         <policy>
 514                 <rule effect="permit">
 515                         <condition combine="and">
 516                                 <resource-match attr="resource-id">r9</resource-match>
 517                                 <resource-match attr="r9e.host" match="http://onet.pl:80/test.html" />
 518                         </condition>
 519         </rule>
 520         </policy>
 521         <policy>
 522                 <rule effect="deny">
 523                         <condition combine="and">
 524                                 <resource-match attr="resource-id">r9</resource-match>
 525                                 <resource-match attr="r9e" match="*" func="glob"/>
 526                         </condition>
 527         </rule>
 528     </policy>
 529 </policy-set>
 530
 531 <policy-set id="Policy-13" combine="first-matching-target">
 532         <target>
 533                 <subject>
 534                         <subject-match attr="id">s9g</subject-match>
 535                 </subject>
 536         </target>
 537         <policy>
 538                 <rule effect="deny">
 539                         <condition combine="and">
 540                                 <resource-match attr="resource-id">r9</resource-match>
 541                                 <resource-match attr="r9g.path" match="http://onet.pl:80/test.html" />
 542                         </condition>
 543         </rule>
 544         </policy>
 545         <policy>
 546                 <rule effect="permit">
 547                         <condition combine="and">
 548                                 <resource-match attr="resource-id">r9</resource-match>
 549                                 <resource-match attr="r9g" match="*" func="glob"/>
 550                         </condition>
 551         </rule>
 552     </policy>
 553 </policy-set>
 554
 555 <policy-set  id="Policy-14" combine="first-matching-target">
 556         <target>
 557                 <subject>
 558                         <subject-match attr="id">s9h</subject-match>
 559         </subject>
 560         </target>
 561         <policy>
 562                 <rule effect="permit">
 563                         <condition combine="and">
 564                                 <resource-match attr="resource-id">r9</resource-match>
 565                                 <resource-match attr="r9g.path" match="http://onet.pl:80/test.html" />
 566                         </condition>
 567         </rule>
 568         </policy>
 569         <policy>
 570                 <rule effect="deny">
 571                         <condition combine="and">
 572                                 <resource-match attr="resource-id">r9</resource-match>
 573                                 <resource-match attr="r9g" match="*" func="glob"/>
 574                         </condition>
 575         </rule>
 576     </policy>
 577 </policy-set>
 578
 579 <policy-set id="Policy-15" combine="first-matching-target">
 580         <target>
 581                 <subject>
 582                         <subject-match attr="id">s10a</subject-match>
 583                 </subject>
 584         </target>
 585         <policy>
 586                 <rule effect="permit">
 587                         <condition combine="and">
 588                                 <resource-match attr="resource-id">r10</resource-match>
 589                                 <resource-match attr="r10a" match="[1234567890]+[ab]+" func="regexp" />
 590                         </condition>
 591         </rule>
 592         </policy>
 593         <policy>
 594                 <rule effect="deny">
 595                         <condition combine="and">
 596                                 <resource-match attr="resource-id">r10</resource-match>
 597                                 <resource-match attr="r10a" match="*" func="glob"/>
 598                         </condition>
 599         </rule>
 600     </policy>
 601 </policy-set>
 602
 603 <policy-set id="Policy-16" combine="first-matching-target">
 604         <target>
 605                 <subject>
 606                         <subject-match attr="id">s10b</subject-match>
 607         </subject>
 608     </target>
 609         <policy>
 610                 <rule effect="deny">
 611                         <condition combine="and">
 612                                 <resource-match attr="resource-id">r10</resource-match>
 613                                 <resource-match attr="r10a" match="[1234567890]+[ab]+" func="regexp" />
 614                         </condition>
 615         </rule>
 616         </policy>
 617         <policy>
 618                 <rule effect="permit">
 619                         <condition combine="and">
 620                                 <resource-match attr="resource-id">r10</resource-match>
 621                                 <resource-match attr="r10a" match="*" func="glob"/>
 622                         </condition>
 623         </rule>
 624     </policy>
 625 </policy-set>
 626
 627 <policy-set id="Policy-17" combine="first-matching-target">
 628         <target>
 629                 <subject>
 630                         <subject-match attr="id">s10c</subject-match>
 631         </subject>
 632     </target>
 633         <policy>
 634                 <rule effect="permit">
 635                         <condition combine="and">
 636                                 <resource-match attr="resource-id">r10</resource-match>
 637                                 <resource-match attr="r10c" match="[1234567890]+[ab]+" func="regexp" />
 638                         </condition>
 639         </rule>
 640         </policy>
 641         <policy>
 642                 <rule effect="deny">
 643                         <condition combine="and">
 644                                 <resource-match attr="resource-id">r10</resource-match>
 645                                 <resource-match attr="r10c" match="*" func="glob"/>
 646                         </condition>
 647         </rule>
 648     </policy>
 649 </policy-set>
 650
 651
 652 <!-- justyna -->
 653
 654 <!---    test 13    (old name: test 100)-->
 655
 656
 657 <policy-set combine="first-matching-target">
 658         <target>
 659                 <subject>
 660                         <subject-match attr="id">s13</subject-match>
 661                 </subject>
 662         </target>
 663         <policy>
 664                 <rule effect="permit">
 665                         <condition combine="and">
 666                                 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
 667                         </condition>
 668                  </rule>
 669         </policy>
 670 </policy-set>
 671
 672
 673
 674 <!---    test 14    (old name: test 101)-->
 675
 676 <policy-set combine="first-matching-target">
 677         <target>
 678                 <subject>
 679                         <subject-match attr="id">s14</subject-match>
 680                 </subject>
 681         </target>
 682         <policy>
 683                 <rule effect="permit">
 684                         <condition combine="and">
 685                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
 686                                 <subject-match attr="version" match="5"/>
 687                         </condition>
 688                  </rule>
 689         </policy>
 690 </policy-set>
 691
 692
 693 <!---    test 15    (old name: test 102) -->
 694
 695 <policy-set combine="first-matching-target">
 696         <target>
 697                 <subject>
 698                         <subject-match attr="uri.host" match="//buu.com.pl"/>
 699                 </subject>
 700         </target>
 701         <policy>
 702                 <rule effect="permit">
 703                         <condition combine="and">
 704                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
 705                         </condition>
 706                  </rule>
 707         </policy>
 708 </policy-set>
 709
 710 <!---    test 16    (old name: test 103) -->
 711
 712 <policy-set combine="first-matching-target">
 713         <target>
 714                 <subject>
 715                         <subject-match attr="id">s16</subject-match>
 716                         <subject-match attr="uri.host" match="v.com.pl"/>
 717
 718                 </subject>
 719         </target>
 720         <policy>
 721                 <rule effect="permit">
 722                         <condition combine="and">
 723                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
 724                         </condition>
 725                  </rule>
 726         </policy>
 727 </policy-set>
 728
 729
 730
 731 <!---    test 17    (old name: test 104)-->
 732
 733 <policy-set combine="first-matching-target">
 734         <target>
 735             <subject>
 736                 <subject-match attr="id">subject4</subject-match>
 737                 <subject-match attr="version" match="4" />
 738             </subject>
 739         </target>
 740 <policy>
 741         <rule effect="permit">
 742             <condition>
 743                 <resource-match attr="resource-id">
 744                     resource4
 745                 </resource-match>
 746             </condition>
 747         </rule>
 748     </policy>
 749 </policy-set>
 750
 751
 752 <policy-set combine="first-matching-target">
 753         <target>
 754             <subject>
 755                 <subject-match attr="id">subject5</subject-match>
 756                 <subject-match attr="version" match="4" />
 757             </subject>
 758         </target>
 759 <policy>
 760         <rule effect="deny">
 761             <condition>
 762                 <resource-match attr="resource-id">
 763                     resource4
 764                 </resource-match>
 765             </condition>
 766         </rule>
 767     </policy>
 768 </policy-set>
 769
 770 <!---    test 18    (old name: test 105)-->
 771
 772 <policy-set combine="first-matching-target">
 773         <target>
 774                 <subject>
 775                         <subject-match attr="uri" match="buu.com.pl"/>
 776                 </subject>
 777         </target>
 778         <policy>
 779                 <rule effect="permit">
 780                         <condition combine="and">
 781                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
 782                         </condition>
 783                  </rule>
 784         </policy>
 785 </policy-set>
 786
 787 <policy-set combine="first-matching-target">
 788         <target>
 789                 <subject>
 790                         <subject-match attr="id" match="s18b"/>
 791                         <subject-match attr="uri" match="buu.s18b.pl"/>
 792                 </subject>
 793         </target>
 794         <policy>
 795                 <rule effect="permit">
 796                         <condition combine="and">
 797                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
 798                         </condition>
 799                  </rule>
 800         </policy>
 801 </policy-set>
 802
 803 <policy-set combine="first-matching-target">
 804         <target>
 805                 <subject>
 806                         <subject-match attr="id" match="s18c"/>
 807                 </subject>
 808         </target>
 809         <policy>
 810                 <rule effect="permit">
 811                         <condition combine="and">
 812                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
 813                                 <subject-match attr="uri" match="buu.s18c.pl"/>
 814                         </condition>
 815                  </rule>
 816         </policy>
 817 </policy-set>
 818
 819
 820 <!---    test 19    (old name: test 106)-->
 821 <policy-set combine="first-matching-target">
 822         <target>
 823             <subject>
 824                 <subject-match attr="id">s19.1</subject-match>
 825                  <subject-match attr="key-root-trust" match="voperator"/>
 826             </subject>
 827         </target>
 828 <policy>
 829         <rule effect="deny">
 830             <condition>
 831                 <resource-match attr="resource-id">
 832                     resource4
 833                 </resource-match>
 834             </condition>
 835         </rule>
 836     </policy>
 837 </policy-set>
 838
 839 <policy-set combine="first-matching-target">
 840         <target>
 841             <subject>
 842                 <subject-match attr="id">s19.2</subject-match>
 843                 <subject-match attr="key-root-trust" match="voperator"/>
 844             </subject>
 845         </target>
 846 <policy>
 847         <rule effect="permit">
 848             <condition>
 849                 <resource-match attr="resource-id">
 850                     resource4
 851                 </resource-match>
 852             </condition>
 853         </rule>
 854     </policy>
 855 </policy-set>
 856
 857
 858
 859 <!---    test 20    (old name: test 107)-->
 860 <policy-set combine="first-matching-target">
 861         <target>
 862             <subject>
 863                 <subject-match attr="id">s20.1</subject-match>
 864                 <subject-match attr="signer-id" match="v7zha89%49x£$"/>
 865             </subject>
 866         </target>
 867 <policy>
 868         <rule effect="deny">
 869             <condition>
 870                 <resource-match attr="resource-id">
 871                     resource4
 872                 </resource-match>
 873             </condition>
 874         </rule>
 875     </policy>
 876 </policy-set>
 877
 878 <policy-set combine="first-matching-target">
 879         <target>
 880             <subject>
 881                <subject-match attr="id">s20.2</subject-match>
 882                <subject-match attr="signer-id" match="v7zha89%49x£$"/>
 883             </subject>
 884         </target>
 885 <policy>
 886         <rule effect="permit">
 887             <condition>
 888                 <resource-match attr="resource-id">
 889                     resource4
 890                 </resource-match>
 891             </condition>
 892         </rule>
 893     </policy>
 894 </policy-set>
 895
 896 <!-- justyna -->
 897
 898
 899 <!---    test 21    (old name: test 103 U)-->
 900 <policy-set combine="first-matching-target">
 901         <target>
 902                 <subject>
 903                         <subject-match attr="id">s21</subject-match>
 904                 </subject>
 905         </target>
 906         <policy>
 907                 <rule effect="permit">
 908                         <condition combine="and">
 909                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
 910
 911                         </condition>
 912                  </rule>
 913         </policy>
 914 </policy-set>
 915
 916
 917 <!---    test 23    (old name: test 105 U)-->
 918 <policy-set combine="first-matching-target">
 919         <target>
 920                 <subject>
 921                         <subject-match attr="id">s23</subject-match>
 922                 </subject>
 923         </target>
 924         <policy>
 925                 <rule effect="permit">
 926                         <condition combine="and">
 927                                 <resource-match attr="resource-id"  match="device:pim"/>
 928                                 <subject-match attr="version" match="5"/>
 929
 930                         </condition>
 931                  </rule>
 932         </policy>
 933 </policy-set>
 934
 935
 936
 937 <!---    test 24    (old name: test 106 U)-->
 938 <policy-set combine="first-matching-target">
 939         <target>
 940                 <subject>
 941                         <subject-match attr="id">s24</subject-match>
 942                 </subject>
 943         </target>
 944         <policy>
 945                 <rule effect="permit">
 946                         <condition combine="or">
 947                                 <subject-match attr="version" match="5"/>
 948                                 <resource-match attr="resource-id"  match="device:pim"/>
 949                         </condition>
 950                  </rule>
 951         </policy>
 952 </policy-set>
 953
 954
 955 <!---    test 25.1    (old name: test 107 U)-->
 956 <policy-set combine="first-matching-target">
 957         <target>
 958                 <subject>
 959                         <subject-match attr="id">s25.1</subject-match>
 960                 </subject>
 961         </target>
 962         <policy>
 963                 <rule effect="permit">
 964                 <condition combine="and">
 965                         <condition combine="and">
 966                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
 967                                 <subject-match attr="version" match="5"/>
 968
 969                         </condition>
 970                         <condition combine="and">
 971                                 <resource-match attr="resource-id"  match="device:pim"/>
 972                                 <subject-match attr="version" match="5"/>
 973
 974                         </condition>
 975
 976                 </condition>
 977                  </rule>
 978         </policy>
 979 </policy-set>
 980
 981
 982 <!---    test 25.2    (old name: test 107 a U -->
 983 <policy-set combine="first-matching-target">
 984         <target>
 985                 <subject>
 986                         <subject-match attr="id">s25.2</subject-match>
 987                 </subject>
 988         </target>
 989         <policy>
 990                 <rule effect="permit">
 991                 <condition combine="and">
 992                         <condition combine="and">
 993                                 <resource-match attr="resource-id"  match="device:pim"/>
 994                                 <subject-match attr="version" match="5"/>
 995
 996                         </condition>
 997                         <condition combine="and">
 998                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
 999                                 <subject-match attr="version" match="5"/>
1000
1001                         </condition>
1002
1003
1004                 </condition>
1005                  </rule>
1006         </policy>
1007 </policy-set>
1008
1009
1010 <!---    test 25.3    (old name: test 107 b U -->
1011 <policy-set combine="first-matching-target">
1012         <target>
1013                 <subject>
1014                         <subject-match attr="id">s25.3</subject-match>
1015                 </subject>
1016         </target>
1017         <policy>
1018                 <rule effect="permit">
1019                 <condition combine="and">
1020                         <condition combine="or">
1021                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1022                                 <subject-match attr="version" match="5"/>
1023
1024                         </condition>
1025                         <condition combine="and">
1026                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1027                                 <subject-match attr="version" match="5"/>
1028
1029                         </condition>
1030
1031
1032                 </condition>
1033                  </rule>
1034         </policy>
1035 </policy-set>
1036
1037 <!---    test 25.4    (old name: test 107 c U -->
1038 <policy-set combine="first-matching-target">
1039         <target>
1040                 <subject>
1041                         <subject-match attr="id">s25.4</subject-match>
1042                 </subject>
1043         </target>
1044         <policy>
1045                 <rule effect="permit">
1046                 <condition combine="and">
1047                         <condition combine="and">
1048                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1049                                 <subject-match attr="version" match="5"/>
1050
1051                         </condition>
1052                         <condition combine="or">
1053                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1054                                 <subject-match attr="version" match="5"/>
1055
1056                         </condition>
1057
1058
1059
1060                 </condition>
1061                  </rule>
1062         </policy>
1063 </policy-set>
1064
1065
1066
1067 <!---    test 26.1    (old name: test 108 U -->
1068 <policy-set combine="first-matching-target">
1069         <target>
1070                 <subject>
1071                         <subject-match attr="id">s26.1</subject-match>
1072                 </subject>
1073         </target>
1074         <policy>
1075                 <rule effect="permit">
1076                 <condition combine="or">
1077                         <condition combine="and">
1078                                 <resource-match attr="resource-id"  match="device:pim"/>
1079                                 <subject-match attr="version" match="5"/>
1080
1081                         </condition>
1082                         <condition combine="and">
1083                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1084                                 <subject-match attr="version" match="5"/>
1085
1086                         </condition>
1087                 </condition>
1088                  </rule>
1089         </policy>
1090 </policy-set>
1091
1092
1093 <!---    test 26.2    (old name: test 108 a U -->
1094 <policy-set combine="first-matching-target">
1095         <target>
1096                 <subject>
1097                         <subject-match attr="id">s26.2</subject-match>
1098                 </subject>
1099         </target>
1100         <policy>
1101                 <rule effect="permit">
1102                 <condition combine="or">
1103                         <condition combine="or">
1104                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1105                                 <subject-match attr="version" match="5"/>
1106
1107                         </condition>
1108                         <condition combine="and">
1109                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1110                                 <subject-match attr="version" match="5"/>
1111
1112                         </condition>
1113                 </condition>
1114                  </rule>
1115         </policy>
1116 </policy-set>
1117
1118
1119 <!---    test 26.3    (old name: test 108 b U -->
1120 <policy-set combine="first-matching-target">
1121         <target>
1122                 <subject>
1123                         <subject-match attr="id">s26.3</subject-match>
1124                 </subject>
1125         </target>
1126         <policy>
1127                 <rule effect="permit">
1128                 <condition combine="or">
1129                         <condition combine="and">
1130                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1131                                 <subject-match attr="version" match="5"/>
1132
1133                         </condition>
1134                         <condition combine="or">
1135                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1136                                 <subject-match attr="version" match="5"/>
1137
1138                         </condition>
1139
1140                 </condition>
1141                  </rule>
1142         </policy>
1143 </policy-set>
1144
1145 <!---    test 26.4    (old name: test 108 c U -->
1146 <policy-set combine="first-matching-target">
1147         <target>
1148                 <subject>
1149                         <subject-match attr="id">s26.4</subject-match>
1150                 </subject>
1151         </target>
1152         <policy>
1153                 <rule effect="permit">
1154                 <condition combine="or">
1155                         <condition combine="and">
1156                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1157                                 <subject-match attr="version" match="5"/>
1158
1159                         </condition>
1160                         <condition combine="and">
1161                                 <resource-match attr="resource-id"  match="device:pim"/>
1162                                 <subject-match attr="version" match="5"/>
1163
1164                         </condition>
1165
1166                 </condition>
1167                  </rule>
1168         </policy>
1169 </policy-set>
1170
1171
1172
1173 <!---    test 27.1    (old name: test 109 U -->
1174 <policy-set combine="first-matching-target">
1175         <target>
1176                 <subject>
1177                         <subject-match attr="id">s27.1</subject-match>
1178                 </subject>
1179         </target>
1180         <policy>
1181                 <rule effect="permit">
1182                 <condition combine="or">
1183                         <condition combine="or">
1184                                 <resource-match attr="resource-id"  match="device:pim"/>
1185                                 <subject-match attr="version" match="5"/>
1186
1187                         </condition>
1188                         <condition combine="or">
1189                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1190                                 <subject-match attr="version" match="5"/>
1191
1192                         </condition>
1193                 </condition>
1194                  </rule>
1195         </policy>
1196 </policy-set>
1197
1198 <!---    test 27.2    (old name: test 109a U -->
1199 <policy-set combine="first-matching-target">
1200         <target>
1201                 <subject>
1202                         <subject-match attr="id">s27.2</subject-match>
1203                 </subject>
1204         </target>
1205         <policy>
1206                 <rule effect="permit">
1207                 <condition combine="or">
1208                         <condition combine="or">
1209                                 <resource-match attr="resource-id"  match="device:pim"/>
1210                                 <subject-match attr="version" match="5"/>
1211
1212                         </condition>
1213                         <condition combine="and">
1214                                 <resource-match attr="resource-id"  match="device:pim"/>
1215                                 <subject-match attr="version" match="5"/>
1216
1217                         </condition>
1218                 </condition>
1219                  </rule>
1220         </policy>
1221 </policy-set>
1222
1223 <!---    test 27.3    (old name: test 109b U -->
1224 <policy-set combine="first-matching-target">
1225         <target>
1226                 <subject>
1227                         <subject-match attr="id">s27.3</subject-match>
1228                 </subject>
1229         </target>
1230         <policy>
1231                 <rule effect="permit">
1232                 <condition combine="or">
1233                         <condition combine="and">
1234                                 <resource-match attr="resource-id"  match="device:pim"/>
1235                                 <subject-match attr="version" match="5"/>
1236
1237                         </condition>
1238                         <condition combine="or">
1239                                 <resource-match attr="resource-id"  match="device:pim"/>
1240                                 <subject-match attr="version" match="5"/>
1241
1242                         </condition>
1243                 </condition>
1244                  </rule>
1245         </policy>
1246 </policy-set>
1247
1248
1249
1250 <!---    test 27.4    (old name: test 109c U -->
1251 <policy-set combine="first-matching-target">
1252         <target>
1253                 <subject>
1254                         <subject-match attr="id">s27.4</subject-match>
1255                 </subject>
1256         </target>
1257         <policy>
1258                 <rule effect="permit">
1259                 <condition combine="or">
1260                         <condition combine="or">
1261                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1262                                 <subject-match attr="version" match="5"/>
1263
1264                         </condition>
1265                         <condition combine="or">
1266                                 <resource-match attr="resource-id"  match="device:pim"/>
1267                                 <subject-match attr="version" match="5"/>
1268
1269                         </condition>
1270                 </condition>
1271                  </rule>
1272         </policy>
1273 </policy-set>
1274
1275
1276
1277 <!---    test 28    (old name: test 110 U -->
1278 <policy-set combine="first-matching-target">
1279         <target>
1280                 <subject>
1281                         <subject-match attr="id">s28</subject-match>
1282                 </subject>
1283         </target>
1284         <policy>
1285                 <rule effect="permit">
1286                 <condition combine="or">
1287                         <condition combine="and">
1288                                 <resource-match attr="resource-id"  match="device:pim"/>
1289                                 <subject-match attr="version" match="5"/>
1290
1291                         </condition>
1292                         <condition combine="or">
1293                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1294                                 <subject-match attr="version" match="5"/>
1295
1296                         </condition>
1297                 </condition>
1298                  </rule>
1299         </policy>
1300 </policy-set>
1301
1302
1303 <!---    test 29    (old name: test 111 U -->
1304 <policy-set combine="first-matching-target">
1305         <target>
1306                 <subject>
1307                         <subject-match attr="id">s29</subject-match>
1308                 </subject>
1309         </target>
1310         <policy>
1311                 <rule effect="permit">
1312                 <condition combine="and">
1313                         <condition combine="and">
1314                                 <resource-match attr="resource-id"  match="device:pim"/>
1315                                 <subject-match attr="version" match="5"/>
1316
1317                         </condition>
1318                         <condition combine="or">
1319                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1320                                 <subject-match attr="version" match="5"/>
1321
1322                         </condition>
1323                 </condition>
1324                  </rule>
1325         </policy>
1326 </policy-set>
1327
1328 <!---    test 30.1    (old name: test 112 U -->
1329 <policy-set combine="first-matching-target">
1330         <target>
1331                 <subject>
1332                         <subject-match attr="id">s30.1</subject-match>
1333                 </subject>
1334         </target>
1335         <policy>
1336                 <rule effect="permit">
1337                 <condition combine="and">
1338                         <condition combine="and">
1339                                 <resource-match attr="resource-id"  match="device:pim"/>
1340                                 <subject-match attr="version" match="5"/>
1341
1342                         </condition>
1343                         <condition combine="or">
1344                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1345                                 <subject-match attr="version" match="5"/>
1346
1347                         </condition>
1348                 </condition>
1349                  </rule>
1350         </policy>
1351
1352         <policy>
1353                 <rule effect="deny">
1354                 <condition combine="or">
1355                         <condition combine="and">
1356                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1357                                 <subject-match attr="version" match="5"/>
1358
1359                         </condition>
1360                         <condition combine="and">
1361                                 <resource-match attr="resource-id"  match="device:pim"/>
1362                                 <subject-match attr="version" match="5"/>
1363
1364                         </condition>
1365
1366                 </condition>
1367                  </rule>
1368         </policy>
1369 </policy-set>
1370
1371
1372 <!---    test 30.2    (old name: test 112a U -->
1373 <policy-set combine="first-matching-target">
1374         <target>
1375                 <subject>
1376                         <subject-match attr="id">s30.2</subject-match>
1377                 </subject>
1378         </target>
1379         <policy>
1380                 <rule effect="permit">
1381                 <condition combine="or">
1382                         <condition combine="and">
1383                                 <resource-match attr="resource-id"  match="device:pim"/>
1384                                 <subject-match attr="version" match="5"/>
1385
1386                         </condition>
1387                         <condition combine="or">
1388                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1389                                 <subject-match attr="version" match="5"/>
1390
1391                         </condition>
1392                 </condition>
1393                  </rule>
1394         </policy>
1395
1396         <policy>
1397                 <rule effect="deny">
1398                 <condition combine="or">
1399                         <condition combine="and">
1400                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1401                                 <subject-match attr="version" match="5"/>
1402
1403                         </condition>
1404                         <condition combine="and">
1405                                 <resource-match attr="resource-id"  match="device:pim"/>
1406                                 <subject-match attr="version" match="5"/>
1407
1408                         </condition>
1409
1410                 </condition>
1411                  </rule>
1412         </policy>
1413 </policy-set>
1414
1415
1416 <!---    test 30.3    (old name: test 112b U -->
1417 <policy-set combine="first-matching-target">
1418         <target>
1419                 <subject>
1420                         <subject-match attr="id">s30.3</subject-match>
1421                 </subject>
1422         </target>
1423         <policy>
1424                 <rule effect="permit">
1425                 <condition combine="or">
1426                         <condition combine="and">
1427                                 <resource-match attr="resource-id"  match="device:pim"/>
1428                                 <subject-match attr="version" match="5"/>
1429
1430                         </condition>
1431                         <condition combine="and">
1432                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1433                                 <subject-match attr="version" match="5"/>
1434
1435                         </condition>
1436                 </condition>
1437                  </rule>
1438         </policy>
1439
1440         <policy>
1441                 <rule effect="deny">
1442                 <condition combine="and">
1443                         <condition combine="and">
1444                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1445                                 <subject-match attr="version" match="5"/>
1446
1447                         </condition>
1448                         <condition combine="and">
1449                                 <resource-match attr="resource-id"  match="device:pim"/>
1450                                 <subject-match attr="version" match="5"/>
1451
1452                         </condition>
1453
1454                 </condition>
1455                  </rule>
1456         </policy>
1457 </policy-set>
1458
1459 <!---    test 30.4    (old name: test 112c U -->
1460 <policy-set combine="first-matching-target">
1461         <target>
1462                 <subject>
1463                         <subject-match attr="id">s30.4</subject-match>
1464                 </subject>
1465         </target>
1466         <policy>
1467                 <rule effect="deny">
1468                 <condition combine="or">
1469                         <condition combine="and">
1470                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1471                                 <subject-match attr="version" match="5"/>
1472
1473                         </condition>
1474                         <condition combine="and">
1475                                 <resource-match attr="resource-id"  match="device:pim"/>
1476                                 <subject-match attr="version" match="5"/>
1477
1478                         </condition>
1479
1480                 </condition>
1481                  </rule>
1482         </policy>
1483
1484         <policy>
1485                 <rule effect="permit">
1486                 <condition combine="or">
1487                         <condition combine="and">
1488                                 <resource-match attr="resource-id"  match="device:pim"/>
1489                                 <subject-match attr="version" match="5"/>
1490
1491                         </condition>
1492                         <condition combine="or">
1493                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1494                                 <subject-match attr="version" match="5"/>
1495
1496                         </condition>
1497                 </condition>
1498                  </rule>
1499         </policy>
1500
1501 </policy-set>
1502
1503
1504
1505 <!---    test 31.1    (old name: test 113 U -->
1506 <policy-set combine="deny-overrides">
1507         <target>
1508                 <subject>
1509                         <subject-match attr="id">s31.1</subject-match>
1510                 </subject>
1511         </target>
1512         <policy>
1513                 <rule effect="permit">
1514                 <condition combine="and">
1515                         <condition combine="or">
1516                                 <resource-match attr="resource-id"  match="device:pim"/>
1517                                 <subject-match attr="version" match="5"/>
1518
1519                         </condition>
1520                         <condition combine="and">
1521                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1522                                 <subject-match attr="version" match="5"/>
1523
1524                         </condition>
1525                 </condition>
1526                  </rule>
1527         </policy>
1528
1529         <policy>
1530                 <rule effect="deny">
1531                 <condition combine="and">
1532                         <condition combine="and">
1533                                 <resource-match attr="resource-id"  match="device:pim"/>
1534                                 <subject-match attr="version" match="5"/>
1535
1536                         </condition>
1537                         <condition combine="or">
1538                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1539                                 <subject-match attr="version" match="5"/>
1540
1541                         </condition>
1542                 </condition>
1543                  </rule>
1544         </policy>
1545 </policy-set>
1546
1547
1548
1549 <!---    test 31.2.1    (old name: test 113a U -->
1550 <policy-set combine="deny-overrides">
1551         <target>
1552                 <subject>
1553                         <subject-match attr="id">s31.2.1</subject-match>
1554                 </subject>
1555         </target>
1556         <policy>
1557                 <rule effect="permit">
1558                 <condition combine="and">
1559                         <condition combine="or">
1560                                 <resource-match attr="resource-id"  match="device:pim"/>
1561                                 <subject-match attr="version" match="5"/>
1562
1563                         </condition>
1564                         <condition combine="and">
1565                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1566                                 <subject-match attr="version" match="5"/>
1567
1568                         </condition>
1569                 </condition>
1570                  </rule>
1571         </policy>
1572
1573         <policy>
1574                 <rule effect="deny">
1575                 <condition combine="or">
1576                         <condition combine="or">
1577                                 <resource-match attr="resource-id"  match="device:pim"/>
1578                                 <subject-match attr="version" match="5"/>
1579
1580                         </condition>
1581                         <condition combine="or">
1582                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1583                                 <subject-match attr="version" match="5"/>
1584
1585                         </condition>
1586                 </condition>
1587                  </rule>
1588         </policy>
1589 </policy-set>
1590
1591
1592 <!---    test 31.2.2    (old name: test 113aa U -->
1593 <policy-set combine="deny-overrides">
1594         <target>
1595                 <subject>
1596                         <subject-match attr="id">s31.2.2</subject-match>
1597                 </subject>
1598         </target>
1599         <policy>
1600                 <rule effect="permit">
1601                 <condition combine="and">
1602                         <condition combine="or">
1603                                 <resource-match attr="resource-id"  match="device:pim"/>
1604                                 <subject-match attr="version" match="5"/>
1605
1606                         </condition>
1607                         <condition combine="and">
1608                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1609                                 <subject-match attr="version" match="5"/>
1610
1611                         </condition>
1612                 </condition>
1613                  </rule>
1614         </policy>
1615
1616         <policy>
1617                 <rule effect="permit">
1618                 <condition combine="or">
1619                         <condition combine="or">
1620                                 <resource-match attr="resource-id"  match="device:pim"/>
1621                                 <subject-match attr="version" match="5"/>
1622
1623                         </condition>
1624                         <condition combine="or">
1625                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1626                                 <subject-match attr="version" match="5"/>
1627
1628                         </condition>
1629                 </condition>
1630                  </rule>
1631         </policy>
1632 </policy-set>
1633
1634
1635 <!---    test 31.3    (old name: test 113b U -->
1636 <policy-set combine="deny-overrides">
1637         <target>
1638                 <subject>
1639                         <subject-match attr="id">s31.3</subject-match>
1640                 </subject>
1641         </target>
1642
1643
1644         <policy>
1645                 <rule effect="permit">
1646                 <condition combine="and">
1647                         <condition combine="or">
1648                                 <resource-match attr="resource-id"  match="device:pim"/>
1649                                 <subject-match attr="version" match="5"/>
1650
1651                         </condition>
1652                         <condition combine="and">
1653                                 <resource-match attr="resource-id"  match="device:pim"/>
1654                                 <subject-match attr="version" match="5"/>
1655
1656                         </condition>
1657                 </condition>
1658                  </rule>
1659         </policy>
1660
1661         <policy>
1662                 <rule effect="permit">
1663                 <condition combine="and">
1664                         <condition combine="or">
1665                                 <resource-match attr="resource-id"  match="device:pim"/>
1666                                 <subject-match attr="version" match="5"/>
1667
1668                         </condition>
1669                         <condition combine="and">
1670                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1671                                 <subject-match attr="version" match="5"/>
1672
1673                         </condition>
1674                 </condition>
1675                  </rule>
1676         </policy>
1677
1678 </policy-set>
1679
1680 <!---    test 32.1    (old name: test 114 U -->
1681 <policy-set combine="permit-overrides">
1682         <target>
1683                 <subject>
1684                         <subject-match attr="id">s32.1</subject-match>
1685                 </subject>
1686         </target>
1687         <policy>
1688                 <rule effect="permit">
1689                 <condition combine="and">
1690                         <condition combine="and">
1691                                 <resource-match attr="resource-id"  match="device:pim"/>
1692                                 <subject-match attr="version" match="5"/>
1693
1694                         </condition>
1695                         <condition combine="or">
1696                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1697                                 <subject-match attr="version" match="5"/>
1698
1699                         </condition>
1700                 </condition>
1701                  </rule>
1702         </policy>
1703
1704         <policy>
1705                 <rule effect="deny">
1706                 <condition combine="or">
1707                         <condition combine="and">
1708                                 <resource-match attr="resource-id"  match="device:pim"/>
1709                                 <subject-match attr="version" match="5"/>
1710
1711                         </condition>
1712                         <condition combine="and">
1713                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1714                                 <subject-match attr="version" match="5"/>
1715
1716                         </condition>
1717                 </condition>
1718                  </rule>
1719         </policy>
1720 </policy-set>
1721
1722
1723 <!---    test 32.2.1    (old name: test 114a U -->
1724 <policy-set combine="permit-overrides">
1725         <target>
1726                 <subject>
1727                         <subject-match attr="id">s32.2.1</subject-match>
1728                 </subject>
1729         </target>
1730         <policy>
1731                 <rule effect="permit">
1732                 <condition combine="or">
1733                         <condition combine="and">
1734                                 <resource-match attr="resource-id"  match="device:pim"/>
1735                                 <subject-match attr="version" match="5"/>
1736
1737                         </condition>
1738                         <condition combine="or">
1739                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1740                                 <subject-match attr="version" match="5"/>
1741
1742                         </condition>
1743                 </condition>
1744                  </rule>
1745         </policy>
1746
1747         <policy>
1748                 <rule effect="deny">
1749                 <condition combine="or">
1750                         <condition combine="and">
1751                                 <resource-match attr="resource-id"  match="device:pim"/>
1752                                 <subject-match attr="version" match="5"/>
1753
1754                         </condition>
1755                         <condition combine="and">
1756                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1757                                 <subject-match attr="version" match="5"/>
1758
1759                         </condition>
1760                 </condition>
1761                  </rule>
1762         </policy>
1763 </policy-set>
1764
1765 <!---    test 32.2.2    (old name: test 114aa U -->
1766 <policy-set combine="permit-overrides">
1767         <target>
1768                 <subject>
1769                         <subject-match attr="id">s32.2.2</subject-match>
1770                 </subject>
1771         </target>
1772         <policy>
1773                 <rule effect="deny">
1774                 <condition combine="or">
1775                         <condition combine="and">
1776                                 <resource-match attr="resource-id"  match="device:pim"/>
1777                                 <subject-match attr="version" match="5"/>
1778
1779                         </condition>
1780                         <condition combine="or">
1781                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1782                                 <subject-match attr="version" match="5"/>
1783
1784                         </condition>
1785                 </condition>
1786                  </rule>
1787         </policy>
1788
1789         <policy>
1790                 <rule effect="deny">
1791                 <condition combine="or">
1792                         <condition combine="and">
1793                                 <resource-match attr="resource-id"  match="device:pim"/>
1794                                 <subject-match attr="version" match="5"/>
1795
1796                         </condition>
1797                         <condition combine="and">
1798                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1799                                 <subject-match attr="version" match="5"/>
1800
1801                         </condition>
1802                 </condition>
1803                  </rule>
1804         </policy>
1805 </policy-set>
1806
1807 <!---    test 32.3    (old name: test 114b U -->
1808 <policy-set combine="permit-overrides">
1809         <target>
1810                 <subject>
1811                         <subject-match attr="id">s32.3</subject-match>
1812                 </subject>
1813         </target>
1814         <policy>
1815                 <rule effect="deny">
1816                 <condition combine="or">
1817                         <condition combine="and">
1818                                 <resource-match attr="resource-id"  match="device:pim"/>
1819                                 <subject-match attr="version" match="5"/>
1820
1821                         </condition>
1822                         <condition combine="or">
1823                                 <resource-match attr="resource-id"  match="device"/>
1824                                 <subject-match attr="version" match="5"/>
1825
1826                         </condition>
1827                 </condition>
1828                  </rule>
1829         </policy>
1830
1831         <policy>
1832                 <rule effect="deny">
1833                 <condition combine="and">
1834                         <condition combine="and">
1835                                 <resource-match attr="resource-id"  match="device:pim"/>
1836                                 <subject-match attr="version" match="5"/>
1837
1838                         </condition>
1839                         <condition combine="and">
1840                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1841                                 <subject-match attr="version" match="5"/>
1842
1843                         </condition>
1844                 </condition>
1845                  </rule>
1846         </policy>
1847 </policy-set>
1848
1849
1850 <!---    test 33.1    (old name: test 115 U -->
1851 <policy-set combine="first-matching-target">
1852         <target>
1853                 <subject>
1854                         <subject-match attr="id">s33.1</subject-match>
1855                 </subject>
1856         </target>
1857         <policy combine="first-applicable">
1858                 <rule effect="permit">
1859                         <condition combine="and">
1860                                 <resource-match attr="resource-id"  match="device:pim"/>
1861                                 <subject-match attr="version" match="5"/>
1862
1863                         </condition>
1864                 </rule>
1865                 <rule effect="permit">
1866                         <condition combine="and">
1867                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1868                                 <subject-match attr="version" match="5"/>
1869
1870                         </condition>
1871                  </rule>
1872         </policy>
1873 </policy-set>
1874
1875
1876 <!---    test 33.2    (old name: test 115a U -->
1877 <policy-set combine="first-matching-target">
1878         <target>
1879                 <subject>
1880                         <subject-match attr="id">s33.2</subject-match>
1881                 </subject>
1882         </target>
1883         <policy combine="first-applicable">
1884                 <rule effect="permit">
1885                         <condition combine="or">
1886                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1887                                 <subject-match attr="version" match="5"/>
1888
1889                         </condition>
1890                 </rule>
1891                 <rule effect="permit">
1892                         <condition combine="and">
1893                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1894                                 <subject-match attr="version" match="5"/>
1895
1896                         </condition>
1897                  </rule>
1898         </policy>
1899 </policy-set>
1900
1901
1902 <!---    test 33.3    (old name: test 115b U -->
1903 <policy-set combine="first-matching-target">
1904         <target>
1905                 <subject>
1906                         <subject-match attr="id">s33.3</subject-match>
1907                 </subject>
1908         </target>
1909         <policy combine="first-applicable">
1910                 <rule effect="permit">
1911                         <condition combine="and">
1912                                 <resource-match attr="resource-id"  match="device:pim"/>
1913                                 <subject-match attr="version" match="5"/>
1914
1915                         </condition>
1916                 </rule>
1917                 <rule effect="permit">
1918                         <condition combine="or">
1919                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1920                                 <subject-match attr="version" match="5"/>
1921
1922                         </condition>
1923                  </rule>
1924         </policy>
1925 </policy-set>
1926
1927
1928 <!---    test 34.1    (old name: test 116 U -->
1929 <policy-set combine="first-matching-target">
1930         <target>
1931                 <subject>
1932                         <subject-match attr="id">s34.1</subject-match>
1933                 </subject>
1934         </target>
1935         <policy  combine="permit-overrides">
1936                 <rule effect="permit">
1937                         <condition combine="and">
1938                                 <resource-match attr="resource-id"  match="device:pim"/>
1939                                 <subject-match attr="version" match="5"/>
1940                         </condition>
1941                 </rule>
1942                 <rule effect="permit">
1943                         <condition combine="and">
1944                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1945                                 <subject-match attr="version" match="5"/>
1946
1947                         </condition>
1948                  </rule>
1949         </policy>
1950 </policy-set>
1951
1952 <!---    test 34.2    (old name: test 116 a U -->
1953 <policy-set combine="first-matching-target">
1954         <target>
1955                 <subject>
1956                         <subject-match attr="id">s34.2</subject-match>
1957                 </subject>
1958         </target>
1959         <policy  combine="permit-overrides">
1960                 <rule effect="permit">
1961                         <condition combine="and">
1962                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1963                                 <subject-match attr="version" match="5"/>
1964                         </condition>
1965                 </rule>
1966                 <rule effect="permit">
1967                         <condition combine="and">
1968                                 <resource-match attr="resource-id"  match="device:pim"/>
1969                                 <subject-match attr="version" match="5"/>
1970
1971                         </condition>
1972                  </rule>
1973         </policy>
1974 </policy-set>
1975
1976
1977
1978 <!---    test 35.1    (old name: test 117 U -->
1979 <policy-set combine="first-matching-target">
1980         <target>
1981                 <subject>
1982                         <subject-match attr="id">s35.1</subject-match>
1983                 </subject>
1984         </target>
1985         <policy combine="deny-overrides">
1986                 <rule effect="permit">
1987                         <condition combine="and">
1988                                 <resource-match attr="resource-id"  match="device:pim"/>
1989                                 <subject-match attr="version" match="5"/>
1990
1991                         </condition>
1992                  </rule>
1993                 <rule effect="permit">
1994                         <condition combine="and">
1995                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
1996                                 <subject-match attr="version" match="5"/>
1997
1998                         </condition>
1999                  </rule>
2000         </policy>
2001 </policy-set>
2002
2003
2004 <!---    test 35.2    (old name: test 117 a U -->
2005 <policy-set combine="first-matching-target">
2006         <target>
2007                 <subject>
2008                         <subject-match attr="id">s35.2</subject-match>
2009                 </subject>
2010         </target>
2011         <policy combine="deny-overrides">
2012                 <rule effect="deny">
2013                         <condition combine="and">
2014                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
2015                                 <subject-match attr="version" match="5"/>
2016
2017                         </condition>
2018                  </rule>
2019                 <rule effect="permit">
2020                         <condition combine="and">
2021                                 <resource-match attr="resource-id"  match="device"/>
2022                                 <subject-match attr="version" match="5"/>
2023
2024                         </condition>
2025                  </rule>
2026         </policy>
2027 </policy-set>
2028
2029 <policy-set>
2030         <target>
2031                 <subject>
2032                         <subject-match attr="id">org.tizen.widget.analogclock</subject-match>
2033                 </subject>
2034         </target>
2035         <policy combine="first-applicable">
2036                 <rule effect="permit">
2037                         <condition combine="and">
2038                                 <resource-match attr="resource-id"  match="http://helloheloo/"/>
2039                         </condition>
2040                  </rule>
2041         </policy>
2042 </policy-set>
2043
2044
2045 <!---    test 36    (old name: test 102 U -->
2046 <policy-set combine="first-matching-target">
2047         <target>
2048                 <subject>
2049                         <subject-match attr="id">s36</subject-match>
2050                         <subject-match attr="version" match="5"/>
2051                 </subject>
2052         </target>
2053         <policy>
2054                 <rule effect="permit">
2055                         <condition combine="and">
2056                                 <resource-match attr="resource-id"  match="device:pim.contacts"/>
2057                                 <subject-match attr="version" match="5"/>
2058                         </condition>
2059                  </rule>
2060         </policy>
2061 </policy-set>
2062
2063
2064
2065
2066 <!---    test 37    (old name: test 108 -->
2067 <!-- mbialota modified -->
2068
2069 <policy-set combine="first-matching-target">
2070         <target>
2071                 <subject>
2072                         <subject-match attr="id">s37</subject-match>
2073                 </subject>
2074         </target>
2075         <policy>
2076                 <rule effect="prompt-oneshot">
2077                         <condition combine="and">
2078                                 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
2079                         </condition>
2080                  </rule>
2081         </policy>
2082 </policy-set>
2083
2084
2085 <!---    test 38    (old name: test 109 -->
2086 <!-- mbialota modified -->
2087
2088 <policy-set combine="first-matching-target">
2089         <target>
2090                 <subject>
2091                         <subject-match attr="id">s38</subject-match>
2092                 </subject>
2093         </target>
2094         <policy>
2095                 <rule effect="prompt-session">
2096                         <condition combine="and">
2097                                 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
2098                         </condition>
2099                  </rule>
2100         </policy>
2101 </policy-set>
2102
2103 <policy-set combine="first-matching-target">
2104         <target>
2105                 <subject>
2106                         <subject-match attr="id">s38.4</subject-match>
2107                 </subject>
2108         </target>
2109         <policy>
2110                 <rule effect="prompt-session">
2111                         <condition combine="and">
2112                                 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
2113                         </condition>
2114                  </rule>
2115         </policy>
2116 </policy-set>
2117
2118 <!---    test 39    (old name: test 110 -->
2119 <!-- mbialota modified -->
2120
2121 <policy-set combine="first-matching-target">
2122         <target>
2123                 <subject>
2124                         <subject-match attr="id">s39</subject-match>
2125                 </subject>
2126         </target>
2127         <policy>
2128                 <rule effect="prompt-blanket">
2129                         <condition combine="and">
2130                                 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
2131                         </condition>
2132                  </rule>
2133         </policy>
2134 </policy-set>
2135
2136 <policy-set combine="first-matching-target">
2137         <target>
2138                 <subject>
2139                         <subject-match attr="id">s39.4</subject-match>
2140                 </subject>
2141         </target>
2142         <policy>
2143                 <rule effect="prompt-blanket">
2144                         <condition combine="and">
2145                                 <resource-match attr="resource-id">device:pim.contacts.read</resource-match>
2146                         </condition>
2147                  </rule>
2148         </policy>
2149 </policy-set>
2150
2151
2152 <!-- Maria -->
2153 <!-- testing different methods of policies and rules combining-->
2154 <!---    test 40    (old name: test 200 -->
2155
2156 <!--- two opposite rules put into different policies in one policy set -->
2157 <policy-set combine="first-matching-target">
2158         <target>
2159                 <subject>
2160                         <subject-match attr="id">s40</subject-match>
2161                 </subject>
2162         </target>
2163         <policy>
2164                 <rule effect="permit">
2165                         <condition combine="and">
2166                                 <resource-match attr="resource-id">r40</resource-match>
2167                         </condition>
2168         </rule>
2169         </policy>
2170         <policy>
2171                 <rule effect="deny">
2172                         <condition combine="and">
2173                                 <resource-match attr="resource-id">r40</resource-match>
2174                         </condition>
2175         </rule>
2176     </policy>
2177 </policy-set>
2178
2179 <!---    test 41    (old name: test 201 -->
2180
2181 <!--- two different rules put into different policies in one policy set-->
2182 <policy-set combine="first-matching-target">
2183         <target>
2184                 <subject>
2185                         <subject-match attr="id">s41</subject-match>
2186                 </subject>
2187         </target>
2188         <policy>
2189                 <rule effect="permit">
2190                         <condition combine="and">
2191                                 <resource-match attr="resource-id">r41</resource-match>
2192                         </condition>
2193                 </rule>
2194                 <rule effect="deny">
2195                         <condition combine="and">
2196                                 <resource-match attr="resource-id">r41.2</resource-match>
2197                         </condition>
2198                 </rule>
2199         </policy>
2200 </policy-set>
2201
2202 <!---    test 42.1    (old name: test 202 -->
2203 <!--- two opposite rules put into one policy in one policy set-->
2204 <!--- this case will have the result of deny because of default rules combining==deny override, which is not the same as policies combining -->
2205
2206 <policy-set combine="first-matching-target">
2207         <target>
2208                 <subject>
2209                         <subject-match attr="id">s42.1</subject-match>
2210                 </subject>
2211         </target>
2212         <policy>
2213                 <rule effect="permit">
2214                         <condition combine="and">
2215                                 <resource-match attr="resource-id">r42.1</resource-match>
2216                         </condition>
2217                 </rule>
2218                 <rule effect="deny">
2219                         <condition combine="and">
2220                                 <resource-match attr="resource-id">r42.1</resource-match>
2221                         </condition>
2222                 </rule>
2223         </policy>
2224 </policy-set>
2225
2226 <!---    test 42.2    (old name: test 202b -->
2227 <!--- two opposite rules put into one policy in one policy set-->
2228 <!--- this case will have the result of deny because of default rules combining==deny override, which is not the same as policies combining -->
2229
2230 <policy-set combine="first-matching-target">
2231         <target>
2232                 <subject>
2233                         <subject-match attr="id">s42.2</subject-match>
2234                 </subject>
2235         </target>
2236         <policy>
2237                 <rule effect="deny">
2238                         <condition combine="and">
2239                                 <resource-match attr="resource-id">r42.2</resource-match>
2240                         </condition>
2241                 </rule>
2242                 <rule effect="permit">
2243                         <condition combine="and">
2244                                 <resource-match attr="resource-id">r42.2</resource-match>
2245                         </condition>
2246                 </rule>
2247         </policy>
2248 </policy-set>
2249
2250 <!---    test 43.1    (old name: test 203 -->
2251
2252 <!--- two opposite rules put into different policies in one policy set-->
2253 <policy-set combine="deny-overrides">
2254         <target>
2255                 <subject>
2256                         <subject-match attr="id">s43.1</subject-match>
2257                 </subject>
2258         </target>
2259         <policy>
2260                 <rule effect="permit">
2261                         <condition combine="and">
2262                                 <resource-match attr="resource-id">r43.1</resource-match>
2263                         </condition>
2264                 </rule>
2265         </policy>
2266         <policy>
2267                 <rule effect="deny">
2268                         <condition combine="and">
2269                                 <resource-match attr="resource-id">r43.1</resource-match>
2270                         </condition>
2271                 </rule>
2272     </policy>
2273 </policy-set>
2274 <!---    test 43.2    (old name: test 203b -->
2275
2276 <!--- two opposite rules put into different policies in one policy set-->
2277 <policy-set combine="deny-overrides">
2278         <target>
2279                 <subject>
2280                         <subject-match attr="id">s43.2</subject-match>
2281                 </subject>
2282         </target>
2283         <policy>
2284                 <rule effect="deny">
2285                         <condition combine="and">
2286                                 <resource-match attr="resource-id">r43.2</resource-match>
2287                         </condition>
2288                 </rule>
2289         </policy>
2290         <policy>
2291                 <rule effect="permit">
2292                         <condition combine="and">
2293                                 <resource-match attr="resource-id">r43.2</resource-match>
2294                         </condition>
2295                 </rule>
2296     </policy>
2297 </policy-set>
2298
2299 <!---    test 44.1    (old name: test 204 -->
2300 <!--- two different rules put into different policies in one policy set-->
2301 <policy-set combine="permit-overrides">
2302         <target>
2303                 <subject>
2304                         <subject-match attr="id">s44.1</subject-match>
2305                 </subject>
2306         </target>
2307         <policy>
2308                 <rule effect="permit">
2309                         <condition combine="and">
2310                                 <resource-match attr="resource-id">r44.1</resource-match>
2311                         </condition>
2312                 </rule>
2313         </policy>
2314         <policy>
2315                 <rule effect="deny">
2316                         <condition combine="and">
2317                                 <resource-match attr="resource-id">r44.1</resource-match>
2318                         </condition>
2319                 </rule>
2320     </policy>
2321 </policy-set>
2322
2323 <!---    test 44.2    (old name: test 204b -->
2324 <!--- two different rules put into different policies in one policy set-->
2325 <policy-set combine="permit-overrides">
2326         <target>
2327                 <subject>
2328                         <subject-match attr="id">s44.2</subject-match>
2329                 </subject>
2330         </target>
2331         <policy>
2332                 <rule effect="deny">
2333                         <condition combine="and">
2334                                 <resource-match attr="resource-id">r44.2</resource-match>
2335                         </condition>
2336                 </rule>
2337         </policy>
2338         <policy>
2339                 <rule effect="permit">
2340                         <condition combine="and">
2341                                 <resource-match attr="resource-id">r44.2</resource-match>
2342                         </condition>
2343                 </rule>
2344     </policy>
2345 </policy-set>
2346
2347 <!---    test 45.1    (old name: test 205 -->
2348 <!--- two opposite rules put into one policy -->
2349 <!--- testing rules combining methods-->
2350 <!--- this case should have the result of permit in contradiction to test 202 -->
2351 <policy-set combine="first-matching-target">
2352         <target>
2353                 <subject>
2354                         <subject-match attr="id">s45.1</subject-match>
2355                 </subject>
2356         </target>
2357         <policy combine="first-applicable">
2358                 <rule effect="permit">
2359                         <condition combine="and">
2360                                 <resource-match attr="resource-id">r45.1</resource-match>
2361                         </condition>
2362                 </rule>
2363                 <rule effect="deny">
2364                         <condition combine="and">
2365                                 <resource-match attr="resource-id">r45.1</resource-match>
2366                         </condition>
2367                 </rule>
2368         </policy>
2369 </policy-set>
2370 <!---    test 45.2    (old name: test 205b -->
2371 <!--- two opposite rules put into one policy -->
2372 <!--- testing rules combining methods-->
2373 <!--- this case should have the result of deny-->
2374 <policy-set combine="first-matching-target">
2375         <target>
2376                 <subject>
2377                         <subject-match attr="id">s45.2</subject-match>
2378                 </subject>
2379         </target>
2380         <policy combine="first-applicable">
2381                 <rule effect="deny">
2382                         <condition combine="and">
2383                                 <resource-match attr="resource-id">r45.2</resource-match>
2384                         </condition>
2385                 </rule>
2386                 <rule effect="permit">
2387                         <condition combine="and">
2388                                 <resource-match attr="resource-id">r45.2</resource-match>
2389                         </condition>
2390                 </rule>
2391         </policy>
2392 </policy-set>
2393
2394 <!---    test 46.1    (old name: test 206 -->
2395 <!--- two opposite rules put into one policy -->
2396
2397
2398 <policy-set combine="first-matching-target">
2399         <target>
2400                 <subject>
2401                         <subject-match attr="id">s46.1</subject-match>
2402                 </subject>
2403         </target>
2404         <policy combine="permit-overrides">
2405                 <rule effect="deny">
2406                         <condition combine="and">
2407                                 <resource-match attr="resource-id">r46.1</resource-match>
2408                         </condition>
2409                 </rule>
2410                 <rule effect="permit">
2411                         <condition combine="and">
2412                                 <resource-match attr="resource-id">r46.1</resource-match>
2413                         </condition>
2414                 </rule>
2415         </policy>
2416 </policy-set>
2417 <!---    test 46.2    (old name: test 206b -->
2418 <!--- two opposite rules put into one policy -->
2419
2420
2421 <policy-set combine="first-matching-target">
2422         <target>
2423                 <subject>
2424                         <subject-match attr="id">s46.2</subject-match>
2425                 </subject>
2426         </target>
2427         <policy combine="permit-overrides">
2428                 <rule effect="permit">
2429                         <condition combine="and">
2430                                 <resource-match attr="resource-id">r46.2</resource-match>
2431                         </condition>
2432                 </rule>
2433                 <rule effect="deny">
2434                         <condition combine="and">
2435                                 <resource-match attr="resource-id">r46.2</resource-match>
2436                         </condition>
2437                 </rule>
2438         </policy>
2439 </policy-set>
2440
2441 <!---    test 47.1    (old name: test 207 -->
2442 <!--- two opposite rules put into one policy -->
2443
2444
2445 <policy-set combine="first-matching-target">
2446         <target>
2447                 <subject>
2448                         <subject-match attr="id">s47.1</subject-match>
2449                 </subject>
2450         </target>
2451         <policy combine="deny-overrides">
2452                 <rule effect="permit">
2453                         <condition combine="and">
2454                                 <resource-match attr="resource-id">r47.1</resource-match>
2455                         </condition>
2456                 </rule>
2457                 <rule effect="deny">
2458                         <condition combine="and">
2459                                 <resource-match attr="resource-id">r47.1</resource-match>
2460                         </condition>
2461                 </rule>
2462         </policy>
2463 </policy-set>
2464 <!---    test 47.2    (old name: test 207b -->
2465 <!--- two opposite rules put into one policy -->
2466
2467 <policy-set combine="first-matching-target">
2468         <target>
2469                 <subject>
2470                         <subject-match attr="id">s47.2</subject-match>
2471                 </subject>
2472         </target>
2473         <policy combine="deny-overrides">
2474                 <rule effect="deny">
2475                         <condition combine="and">
2476                                 <resource-match attr="resource-id">r47.2</resource-match>
2477                         </condition>
2478                 </rule>
2479                 <rule effect="permit">
2480                         <condition combine="and">
2481                                 <resource-match attr="resource-id">r47.2</resource-match>
2482                         </condition>
2483                 </rule>
2484         </policy>
2485 </policy-set>
2486
2487
2488 <!---    test 48 (old name: test 101)-->
2489
2490 <policy-set combine="first-matching-target">
2491 <target>
2492 <subject>
2493 <subject-match attr="id">s48</subject-match>
2494 <subject-match attr="uri.host" match="www.test.pl"/>
2495
2496 </subject>
2497 </target>
2498 <policy>
2499 <rule effect="permit">
2500 <condition combine="and">
2501 <resource-match attr="resource-id" match="device:pim.contacts"/>
2502 <!--<subject-match attr="uri" match="http://www.test.pl:80"/>-->
2503 </condition>
2504 </rule>
2505 </policy>
2506 </policy-set>
2507
2508 </policy-set>
2509
2510 </signed-policy>