You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
45 lines
3.0 KiB
45 lines
3.0 KiB
14 years ago
|
<Policy PolicyId="access-archives"
|
||
|
|
RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides"
|
||
|
|
xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os"
|
||
|
|
xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os"
|
||
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-policy-schema-os.xsd urn:oasis:names:tc:xacml:2.0:context:schema:os http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-context-schema-os.xsd">
|
||
|
|
<Description>Allows users in the "uofm:archives write" group to have unlimited access to all resources in the uofm:archives collection.</Description>
|
||
|
|
<Target>
|
||
|
|
<Subjects>
|
||
|
|
<Subject>
|
||
|
|
<SubjectMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
|
||
|
|
<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">uofm:archives write</AttributeValue>
|
||
|
|
<SubjectAttributeDesignator AttributeId="urn:fedora:names:fedora:2.1:subject:role" DataType="http://www.w3.org/2001/XMLSchema#string"/>
|
||
|
|
</SubjectMatch>
|
||
|
|
</Subject>
|
||
|
|
<Subject>
|
||
|
|
<SubjectMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
|
||
|
|
<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">uofm:archives write</AttributeValue>
|
||
|
|
<SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id" DataType="http://www.w3.org/2001/XMLSchema#string"/>
|
||
|
|
</SubjectMatch>
|
||
|
|
</Subject>
|
||
|
|
</Subjects>
|
||
|
|
<Resources>
|
||
|
|
<Resource>
|
||
|
|
<ResourceMatch MatchId="urn:oasis:names:tc:xacml:2.0:function:anyURI-regexp-match">
|
||
|
|
<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">/islandora:top/uofm:archives/.*</AttributeValue>
|
||
|
|
<ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id" DataType="http://www.w3.org/2001/XMLSchema#anyURI"/>
|
||
|
|
</ResourceMatch>
|
||
|
|
</Resource>
|
||
|
|
<Resource>
|
||
|
|
<ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:anyURI-equal">
|
||
|
|
<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#anyURI">/islandora:top/uofm:archives</AttributeValue>
|
||
|
|
<ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id" DataType="http://www.w3.org/2001/XMLSchema#anyURI"/>
|
||
|
|
</ResourceMatch>
|
||
|
|
</Resource>
|
||
|
|
<Resource>
|
||
|
|
<ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:anyURI-equal">
|
||
|
|
<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#anyURI">/FedoraRepository</AttributeValue>
|
||
|
|
<ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id" DataType="http://www.w3.org/2001/XMLSchema#anyURI"/>
|
||
|
|
</ResourceMatch>
|
||
|
|
</Resource>
|
||
|
|
</Resources>
|
||
|
|
</Target>
|
||
|
|
<Rule Effect="Permit" RuleId="au:edu:mq:melcoe:ramp:fedora:xacml:2.0:rule:generic-permit"/>
|
||
|
|
</Policy>
|