Nope, this one doesn't work. Condition element should come with
FunctionId, according to my schema.
I guess it should be something like "isTrue"
Argyn
> -----Original Message-----
> From: Anne Anderson [mailto:]
> Sent: Wednesday, September 29, 2004 11:52 AM
> To: Kuketayev, Argyn
> Cc:
> Subject: Re: [xacml-users] Sample with matching attributes of
> subj and resource
>
>
> <Rule RuleId="example" Effect="Permit">
> <Condition>
> <Apply
> FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
> <SubjectAttributeDesignator
>
> AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id"
> DataType="http://www.w3.org/2001/XMLSchema#string"/>
> <ResourceAttributeDesignator
> AttributeId="urn:argyn:resource:resource-owner"
> DataType="http://www.w3.org/2001/XMLSchema#string"/>
> </Apply>
> </Condition>
> </Rule>
>
> Anne
>
> On 29 September, Kuketayev, Argyn writes: [xacml-users]
> Sample with matching attributes of subj and resource > From:
> "Kuketayev, Argyn" <> > To:
> > Subject: [xacml-users]
> Sample with matching attributes of subj and resource > Date:
> Wed, 29 Sep 2004 11:22:50 -0400 >
> > Is there an example of matching attributes of subject and
> resource? >
> > I want to permit certain ops on resource, if resource's
> > ownerId matches username of subject.
> >
> > Thanks,
> > Argyn
> >
>
> --
> Anne H. Anderson Email:
> Sun Microsystems Laboratories
> 1 Network Drive,UBUR02-311 Tel: 781/442-0928
> Burlington, MA 01803-0902 USA Fax: 781/442-1692
>
>
