Schema XACML v0.11c.xsd

Transcription

1 Schema XACML v0.11c.xsd schema location: targetnamespace: C:\temp\XACML v0.11c.xsd Elements Complex s Simple s and ActionsType EffectType attributefunction AndType divide equal greaterorequal lessorequal minus nof nonnullsetintersection not or orderedor patternmatch plus policysetstatement policystatement predicate predicateexpression present rule subset superset times ArgumentListType AttributeFunctionAbstractType CompareType NOfType NotType ObligationsType ObligationType OrderedOrType OrType PolicyDesignatorType PolicySetDesignatorType PolicySetStatementType PolicySetType PolicyStatementType PredicateAbstractType PredicateExpressionAbstractType PredicateExpressionType PresentType ResType RuleDesignatorType RuleSetType RuleType SubjectsType TargetType

2 element and xacml:andtype xacml:predicateexpression xacml:predicate <xs:element name="and" ="xacml:andtype" substitutiongroup="xacml:predicateexpression"/>

3 element attributefunction xacml:attributefunctionabstracttype complextype CompareType <xs:element name="attributefunction" ="xacml:attributefunctionabstracttype" abstract="true"/> element divide xacml:argumentlisttype saml:attributedesignator saml:attribute <xs:element name="divide" ="xacml:argumentlisttype" substitutiongroup="xacml:attributefunction"/>

4 element equal xacml:comparetype saml:attributedesignator saml:attribute xacml:attributefunction <xs:element name="equal" ="xacml:comparetype" substitutiongroup="xacml:predicate"/> element greaterorequal xacml:comparetype saml:attributedesignator saml:attribute xacml:attributefunction <xs:element name="greaterorequal" ="xacml:comparetype" substitutiongroup="xacml:predicate"/>

5 element lessorequal xacml:comparetype saml:attributedesignator saml:attribute xacml:attributefunction <xs:element name="lessorequal" ="xacml:comparetype" substitutiongroup="xacml:predicate"/> element minus xacml:argumentlisttype saml:attributedesignator saml:attribute <xs:element name="minus" ="xacml:argumentlisttype" substitutiongroup="xacml:attributefunction"/>

6 element nof attributes xacml:noftype xacml:predicateexpression xacml:predicate Name Type Use Default Fixed Annotation quorum xs:positiveintege r <xs:element name="nof" ="xacml:noftype" substitutiongroup="xacml:predicateexpression"/>

7 element nonnullsetintersection xacml:comparetype saml:attributedesignator saml:attribute xacml:attributefunction <xs:element name="nonnullsetintersection" ="xacml:comparetype" substitutiongroup="xacml:predicate"/>

8 element not xacml:nottype xacml:predicateexpression xacml:predicate <xs:element name="not" ="xacml:nottype" substitutiongroup="xacml:predicateexpression"/>

9 element or xacml:ortype xacml:predicateexpression xacml:predicate <xs:element name="or" ="xacml:ortype" substitutiongroup="xacml:predicateexpression"/>

10 element orderedor xacml:orderedortype xacml:predicateexpression xacml:predicate <xs:element name="orderedor" ="xacml:orderedortype" substitutiongroup="xacml:predicateexpression"/>

11 element patternmatch xacml:comparetype saml:attributedesignator saml:attribute xacml:attributefunction <xs:element name="patternmatch" ="xacml:comparetype" substitutiongroup="xacml:predicate"/> element plus xacml:argumentlisttype saml:attributedesignator saml:attribute <xs:element name="plus" ="xacml:argumentlisttype" substitutiongroup="xacml:attributefunction"/>

12 element policysetstatement attributes xacml:policysetstatementtype description target policyset obligations complextype PolicySetType Name Type Use Default Fixed Annotation policysetid xs:anyuri required policysetname xs:string optional policycombining AlgId xs:anyuri required <xs:element name="policysetstatement" ="xacml:policysetstatementtype"/> element policystatement attributes xacml:policystatementtype description target ruleset obligations complextype PolicySetType Name Type Use Default Fixed Annotation policyid xs:anyuri required policyname xs:string optional rulecombiningal gid xs:anyuri required <xs:element name="policystatement" ="xacml:policystatementtype"/>

13 element predicate xacml:predicateabstracttype complextypes AndType NOfType NotType OrderedOrType OrType PredicateExpressionType <xs:element name="predicate" ="xacml:predicateabstracttype" abstract="true"/> element predicateexpression xacml:predicateexpressionabstracttype complextypes AndType NOfType NotType OrderedOrType OrType PredicateExpressionType <xs:element name="predicateexpression" ="xacml:predicateexpressionabstracttype" abstract="true"/>

14 element present xacml:presenttype saml:attributedesignator <xs:element name="present" ="xacml:presenttype" substitutiongroup="xacml:predicate"/> element rule attributes xacml:ruletype description target effect condition complextype RuleSetType Name Type Use Default Fixed Annotation ruleid xs:anyuri required rulename xs:string optional <xs:element name="rule" ="xacml:ruletype"/>

15 element subset xacml:comparetype saml:attributedesignator saml:attribute xacml:attributefunction <xs:element name="subset" ="xacml:comparetype" substitutiongroup="xacml:predicate"/> element superset xacml:comparetype saml:attributedesignator saml:attribute xacml:attributefunction <xs:element name="superset" ="xacml:comparetype" substitutiongroup="xacml:predicate"/>

16 element times xacml:argumentlisttype saml:attributedesignator saml:attribute <xs:element name="times" ="xacml:argumentlisttype" substitutiongroup="xacml:attributefunction"/> complextype ActionsType saml:actions element TargetType/actions <xs:complextype name="actionstype"> <xs:sequence> <xs:element ref="saml:actions"/>

17 complextype AndType xacml:predicateexpression xacml:predicate element and <xs:complextype name="andtype"> <xs:sequence minoccurs="0" maxoccurs="unbounded"> <xs:choice> <xs:element ref="xacml:predicateexpression"/> <xs:element ref="xacml:predicate"/> </xs:choice>

18 complextype ArgumentListType extension of xacml:attributefunctionabstracttype saml:attributedesignator saml:attribute elements divide minus plus times <xs:complextype name="argumentlisttype"> <xs:complexcontent> <xs:extension base="xacml:attributefunctionabstracttype"> <xs:sequence maxoccurs="unbounded"> <xs:choice> <xs:element ref="saml:attributedesignator"/> <xs:element ref="saml:attribute"/> </xs:choice> </xs:extension> </xs:complexcontent> complextype AttributeFunctionAbstractType element attributefunction complextype ArgumentListType <xs:complextype name="attributefunctionabstracttype"/> complextype CompareType extension of xacml:predicateabstracttype

19 saml:attributedesignator saml:attribute xacml:attributefunction elements equal greaterorequal lessorequal nonnullsetintersection patternmatch subset superset <xs:complextype name="comparetype"> <xs:complexcontent> <xs:extension base="xacml:predicateabstracttype"> <xs:sequence minoccurs="2" maxoccurs="2"> <xs:choice> <xs:element ref="saml:attributedesignator"/> <xs:element ref="saml:attribute"/> <xs:element ref="xacml:attributefunction"/> </xs:choice> </xs:extension> </xs:complexcontent> <!-- XML operands in "set" operations MUST be of xsi: xs:list --> <!-- XML operands in "inequality" operations MUST contain an xsi: attribute for which XACML defines a comparison algorithm --> complextype NOfType

20 attributes xacml:predicateexpression xacml:predicate element nof Name Type Use Default Fixed Annotation quorum xs:positiveintege r <xs:complextype name="noftype"> <xs:sequence minoccurs="0" maxoccurs="unbounded"> <xs:choice> <xs:element ref="xacml:predicateexpression"/> <xs:element ref="xacml:predicate"/> </xs:choice> <xs:attribute name="quorum" ="xs:positiveinteger"/> complextype NotType xacml:predicateexpression xacml:predicate element not <xs:complextype name="nottype">

21 <xs:choice> <xs:element ref="xacml:predicateexpression" minoccurs="0"/> <xs:element ref="xacml:predicate" minoccurs="0"/> </xs:choice> complextype ObligationsType onpermit ondeny elements PolicySetStatementType/obligations PolicyStatementType/obligations <xs:complextype name="obligationstype"> <xs:sequence> <xs:element name="onpermit" ="xacml:obligationtype" minoccurs="0"/> <xs:element name="ondeny" ="xacml:obligationtype" minoccurs="0"/> element ObligationsType/onPermit xacml:obligationtype obligation <xs:element name="onpermit" ="xacml:obligationtype" minoccurs="0"/> element ObligationsType/onDeny xacml:obligationtype obligation <xs:element name="ondeny" ="xacml:obligationtype" minoccurs="0"/>

22 complextype ObligationType obligation elements ObligationsType/onDeny ObligationsType/onPermit <xs:complextype name="obligationtype"> <xs:sequence maxoccurs="unbounded"> <xs:element name="obligation"> <xs:complextype> <xs:sequence maxoccurs="unbounded"> <xs:choice> <xs:element ref="saml:attributedesignator"/> <xs:element ref="saml:attribute"/> </xs:choice> <xs:attribute name="obligationid" ="xs:anyuri" use="required"/> </xs:element> element ObligationType/obligation attributes saml:attributedesignator saml:attribute Name Type Use Default Fixed Annotation ObligationId xs:anyuri required <xs:element name="obligation"> <xs:complextype> <xs:sequence maxoccurs="unbounded"> <xs:choice> <xs:element ref="saml:attributedesignator"/> <xs:element ref="saml:attribute"/> </xs:choice> <xs:attribute name="obligationid" ="xs:anyuri" use="required"/> </xs:element>

23 complextype OrderedOrType xacml:predicateexpression xacml:predicate element orderedor <xs:complextype name="orderedortype"> <xs:sequence minoccurs="0" maxoccurs="unbounded"> <xs:choice> <xs:element ref="xacml:predicateexpression"/> <xs:element ref="xacml:predicate"/> </xs:choice>

24 complextype OrType xacml:predicateexpression xacml:predicate element or <xs:complextype name="ortype"> <xs:sequence minoccurs="0" maxoccurs="unbounded"> <xs:choice> <xs:element ref="xacml:predicateexpression"/> <xs:element ref="xacml:predicate"/> </xs:choice>

25 complextype PolicyDesignatorType policyid policyassertion element PolicySetType/policyDesignator <xs:complextype name="policydesignatortype"> <xs:sequence> <xs:element name="policyid" ="xs:anyuri" minoccurs="0"/> <xs:element name="policyassertion" ="saml:assertiontype"/> element PolicyDesignatorType/policyId xs:anyuri <xs:element name="policyid" ="xs:anyuri" minoccurs="0"/> element PolicyDesignatorType/policyAssertion saml:assertiontype <xs:element name="policyassertion" ="saml:assertiontype"/> complextype PolicySetDesignatorType policysetid policysetassertion element PolicySetType/policySetDesignator <xs:complextype name="policysetdesignatortype"> <xs:sequence> <xs:element name="policysetid" ="xs:anyuri" minoccurs="0"/> <xs:element name="policysetassertion" ="saml:assertiontype"/>

26 element PolicySetDesignatorType/policySetId xs:anyuri <xs:element name="policysetid" ="xs:anyuri" minoccurs="0"/> element PolicySetDesignatorType/policySetAssertion saml:assertiontype <xs:element name="policysetassertion" ="saml:assertiontype"/> complextype PolicySetStatementType attributes extension of saml:statementabstracttype description target policyset obligations element policysetstatement Name Type Use Default Fixed Annotation policysetid xs:anyuri required policysetname xs:string optional policycombining AlgId xs:anyuri required <xs:complextype name="policysetstatementtype"> <xs:complexcontent> <xs:extension base="saml:statementabstracttype"> <xs:sequence> <xs:element name="description" ="xs:string" minoccurs="0"/> <xs:element name="target" ="xacml:targettype"/> <xs:element name="policyset" ="xacml:policysettype" maxoccurs="unbounded"/> <xs:element name="obligations" ="xacml:obligationstype" minoccurs="0"/> <xs:attribute name="policysetid" ="xs:anyuri" use="required"/> <xs:attribute name="policysetname" ="xs:string" use="optional"/> <xs:attribute name="policycombiningalgid" ="xs:anyuri" use="required"/> </xs:extension> </xs:complexcontent>

27 element PolicySetStatementType/description xs:string <xs:element name="description" ="xs:string" minoccurs="0"/> element PolicySetStatementType/target xacml:targettype subjects res actions <xs:element name="target" ="xacml:targettype"/> element PolicySetStatementType/policySet xacml:policysettype xacml:policysetstatement xacml:policystatement policysetdesignator policydesignator <xs:element name="policyset" ="xacml:policysettype" maxoccurs="unbounded"/>

28 element PolicySetStatementType/obligations xacml:obligationstype onpermit ondeny <xs:element name="obligations" ="xacml:obligationstype" minoccurs="0"/> complextype PolicySetType xacml:policysetstatement xacml:policystatement policysetdesignator policydesignator element PolicySetStatementType/policySet <xs:complextype name="policysettype"> <xs:sequence maxoccurs="unbounded"> <xs:choice> <xs:element ref="xacml:policysetstatement"/> <xs:element ref="xacml:policystatement"/> <xs:element name="policysetdesignator" ="xacml:policysetdesignatortype"/> <xs:element name="policydesignator" ="xacml:policydesignatortype"/> </xs:choice> element PolicySetType/policySetDesignator xacml:policysetdesignatortype policysetid policysetassertion

29 <xs:element name="policysetdesignator" ="xacml:policysetdesignatortype"/> element PolicySetType/policyDesignator xacml:policydesignatortype policyid policyassertion <xs:element name="policydesignator" ="xacml:policydesignatortype"/> complextype PolicyStatementType attributes extension of saml:statementabstracttype description target ruleset obligations element policystatement Name Type Use Default Fixed Annotation policyid xs:anyuri required policyname xs:string optional rulecombiningal gid xs:anyuri required <xs:complextype name="policystatementtype"> <xs:complexcontent> <xs:extension base="saml:statementabstracttype"> <xs:sequence> <xs:element name="description" ="xs:string" minoccurs="0"/> <xs:element name="target" ="xacml:targettype"/> <xs:element name="ruleset" ="xacml:rulesettype" maxoccurs="unbounded"/> <xs:element name="obligations" ="xacml:obligationstype" minoccurs="0"/> <xs:attribute name="policyid" ="xs:anyuri" use="required"/> <xs:attribute name="policyname" ="xs:string" use="optional"/> <xs:attribute name="rulecombiningalgid" ="xs:anyuri" use="required"/> </xs:extension> </xs:complexcontent>

30 element PolicyStatementType/description xs:string <xs:element name="description" ="xs:string" minoccurs="0"/> element PolicyStatementType/target xacml:targettype subjects res actions <xs:element name="target" ="xacml:targettype"/> element PolicyStatementType/ruleSet xacml:rulesettype xacml:rule ruledesignator <xs:element name="ruleset" ="xacml:rulesettype" maxoccurs="unbounded"/> element PolicyStatementType/obligations

31 xacml:obligationstype onpermit ondeny <xs:element name="obligations" ="xacml:obligationstype" minoccurs="0"/> complextype PredicateAbstractType element predicate complextypes CompareType PresentType <xs:complextype name="predicateabstracttype"/> complextype PredicateExpressionAbstractType element predicateexpression <xs:complextype name="predicateexpressionabstracttype"/>

32 complextype PredicateExpressionType xacml:predicateexpression xacml:predicate element RuleType/condition <xs:complextype name="predicateexpressiontype"> <xs:choice> <xs:element ref="xacml:predicateexpression"/> <xs:element ref="xacml:predicate"/> </xs:choice> complextype PresentType extension of xacml:predicateabstracttype

33 saml:attributedesignator element present <xs:complextype name="presenttype"> <xs:complexcontent> <xs:extension base="xacml:predicateabstracttype"> <xs:sequence> <xs:element ref="saml:attributedesignator"/> </xs:extension> </xs:complexcontent> complextype ResType saml:attribute element TargetType/res <xs:complextype name="restype"> <xs:sequence maxoccurs="unbounded"> <xs:element ref="saml:attribute"/> complextype RuleDesignatorType ruleid ruledigest element RuleSetType/ruleDesignator <xs:complextype name="ruledesignatortype"> <xs:sequence> <xs:element name="ruleid" ="xs:anyuri" minoccurs="0"/> <xs:element name="ruledigest" minoccurs="0"> <xs:complextype> <xs:attribute name="digestalgid" ="xs:string" default="sha-1"/> <xs:attribute name="base64digest" ="xs:string"/> </xs:element> element RuleDesignatorType/ruleId

34 xs:anyuri <xs:element name="ruleid" ="xs:anyuri" minoccurs="0"/> element RuleDesignatorType/ruleDigest attributes Name Type Use Default Fixed Annotation digestalgid xs:string SHA-1 base64digest xs:string <xs:element name="ruledigest" minoccurs="0"> <xs:complextype> <xs:attribute name="digestalgid" ="xs:string" default="sha-1"/> <xs:attribute name="base64digest" ="xs:string"/> </xs:element> complextype RuleSetType xacml:rule ruledesignator element PolicyStatementType/ruleSet <xs:complextype name="rulesettype"> <xs:sequence maxoccurs="unbounded"> <xs:choice> <xs:element ref="xacml:rule"/> <xs:element name="ruledesignator" ="xacml:ruledesignatortype"/> </xs:choice> element RuleSetType/ruleDesignator xacml:ruledesignatortype ruleid ruledigest <xs:element name="ruledesignator" ="xacml:ruledesignatortype"/>

35 complextype RuleType attributes description target effect condition element rule Name Type Use Default Fixed Annotation ruleid xs:anyuri required rulename xs:string optional <xs:complextype name="ruletype"> <xs:sequence> <xs:element name="description" ="xs:string" minoccurs="0"/> <xs:element name="target" ="xacml:targettype" minoccurs="0"/> <xs:element name="effect" ="xacml:effecttype"/> <xs:element name="condition" ="xacml:predicateexpressiontype" minoccurs="0"/> <xs:attribute name="ruleid" ="xs:anyuri" use="required"/> <xs:attribute name="rulename" ="xs:string" use="optional"/> element RuleType/description xs:string <xs:element name="description" ="xs:string" minoccurs="0"/> element RuleType/target xacml:targettype subjects res actions <xs:element name="target" ="xacml:targettype" minoccurs="0"/>

36 element RuleType/effect facets xacml:effecttype enumeration permit enumeration deny <xs:element name="effect" ="xacml:effecttype"/> element RuleType/condition xacml:predicateexpressiontype xacml:predicateexpression xacml:predicate

37 <xs:element name="condition" ="xacml:predicateexpressiontype" minoccurs="0"/> complextype SubjectsType saml:attribute element TargetType/subjects <xs:complextype name="subjectstype"> <xs:sequence maxoccurs="unbounded"> <xs:element ref="saml:attribute"/> complextype TargetType subjects res actions elements PolicySetStatementType/target PolicyStatementType/target RuleType/target <xs:complextype name="targettype"> <xs:sequence> <xs:element name="subjects" ="xacml:subjectstype"/> <xs:element name="res" ="xacml:restype"/> <xs:element name="actions" ="xacml:actionstype"/> element TargetType/subjects xacml:subjectstype saml:attribute <xs:element name="subjects" ="xacml:subjectstype"/>

38 element TargetType/res xacml:restype saml:attribute <xs:element name="res" ="xacml:restype"/> element TargetType/actions xacml:actionstype saml:actions <xs:element name="actions" ="xacml:actionstype"/> simpletype EffectType facets restriction of xs:string element enumeration enumeration RuleType/effect permit deny <xs:simpletype name="effecttype"> <xs:restriction base="xs:string"> <xs:enumeration value="permit"/> <xs:enumeration value="deny"/> </xs:restriction> </xs:simpletype> XML Schema documentation generated with XML Spy Schema Editor