1 |
22667
|
george.ath
|
<?xml version="1.0" encoding="UTF-8"?>
|
2 |
|
|
<Policy xmlns="urn:oasis:names:tc:xacml:3.0:core:schema:wd-17" PolicyId="NOA_ENABLE_ALL_ACADEMIC" RuleCombiningAlgId="urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:permit-overrides" Version="1.0">
|
3 |
|
|
<Description>This policy enables all users with academic access to download NOA's observations</Description>
|
4 |
|
|
<Target>
|
5 |
|
|
<AnyOf>
|
6 |
|
|
<AllOf>
|
7 |
|
|
<Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
|
8 |
|
|
<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">National Observatory of Athens - http://dias-wrapper.space.noa.gr:8080/espas/csw</AttributeValue>
|
9 |
|
|
<AttributeDesignator
|
10 |
|
|
Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject"
|
11 |
|
|
AttributeId="urn:espas:names:observation:provider"
|
12 |
|
|
DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="true"/>
|
13 |
|
|
</Match>
|
14 |
|
|
</AllOf>
|
15 |
|
|
</AnyOf>
|
16 |
|
|
</Target>
|
17 |
|
|
<Rule Effect="Permit" RuleId="ENABLE_ACADEMIC_USERS">
|
18 |
|
|
<Condition>
|
19 |
|
|
<Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
|
20 |
|
|
<Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only">
|
21 |
|
|
<AttributeDesignator
|
22 |
|
|
Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject"
|
23 |
|
|
AttributeId="urn:espas:names:user:intendeduse"
|
24 |
|
|
DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="true"/>
|
25 |
|
|
</Apply>
|
26 |
|
|
<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">academic</AttributeValue>
|
27 |
|
|
</Apply>
|
28 |
|
|
</Condition>
|
29 |
|
|
</Rule>
|
30 |
|
|
</Policy>
|