IIC352Policy.xml 1.31 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<Policy xmlns="urn:oasis:names:tc:xacml:3.0:core:schema:wd-17" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" PolicyId="urn:oasis:names:tc:xacml:2.0:conformance-test:IIC352:policy" RuleCombiningAlgId="urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:deny-overrides" Version="1.0" >
    <Description>
        Policy for Conformance Test IIC352. Test that special value -INF for data type double is handled by Policy and Request.
    </Description>
    <Target/>
    <Rule Effect="Permit" RuleId="urn:oasis:names:tc:xacml:2.0:conformance-test:IIC352:rule">
        <Description>
            Permit if the test age is -INF.
        </Description>
        <Condition>
		  <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:double-equal">
                <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:double-one-and-only">
                    <AttributeDesignator AttributeId="urn:oasis:names:tc:xacml:2.0:conformance-test:age" Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject" DataType="http://www.w3.org/2001/XMLSchema#double" MustBePresent="false"/>
                </Apply>

            <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#double">-INF</AttributeValue>
		  </Apply>
        </Condition>
    </Rule>
</Policy>