applications/monitoring/src/main/resources/RootMonitoringPolicy.xml

   1 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
   2 <Policy xmlns="urn:oasis:names:tc:xacml:3.0:core:schema:wd-17" PolicyId="urn:org:onap:monitoring:policy:id" Version="1" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:first-applicable">
   3     <Description>The root policy for supporting in-memory onap.Monitoring policy-type policies.</Description>
   4     <Target>
   5         <AnyOf>
   6             <AllOf>
   7                 <Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
   8                     <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">onap.policies.Monitoring</AttributeValue>
   9                     <AttributeDesignator Category="urn:oasis:names:tc:xacml:3.0:attribute-category:resource" AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id" DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="false"/>
  10                 </Match>
  11                 <Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
  12                     <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">DCAE</AttributeValue>
  13                     <AttributeDesignator Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject" AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id" DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="false"/>
  14                 </Match>
  15                 <Match MatchId="urn:oasis:names:tc:xacml:3.0:function:string-equal-ignore-case">
  16                     <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">configure</AttributeValue>
  17                     <AttributeDesignator Category="urn:oasis:names:tc:xacml:3.0:attribute-category:action" AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id" DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="false"/>
  18                 </Match>
  19             </AllOf>
  20         </AnyOf>
  21     </Target>
  22     <Rule RuleId="urn:org:onap:xacml:rule:id:da3338f3-8a9d-4bc7-8266-35b886516354" Effect="Permit">
  23         <Description>PERMIT - TO BE FILLED IN</Description>
  24         <Target>
  25             <AnyOf>
  26                 <AllOf>
  27                     <Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
  28                         <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">John</AttributeValue>
  29                         <AttributeDesignator Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject" AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id" DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="false"/>
  30                     </Match>
  31                     <Match MatchId="urn:oasis:names:tc:xacml:3.0:function:string-equal-ignore-case">
  32                         <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">ACCESS</AttributeValue>
  33                         <AttributeDesignator Category="urn:oasis:names:tc:xacml:3.0:attribute-category:action" AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id" DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="false"/>
  34                     </Match>
  35                 </AllOf>
  36             </AnyOf>
  37         </Target>
  38     </Rule>
  39     <Rule RuleId="urn:org:onap:xacml:rule:id:74caee98-bd05-4bb5-917c-a26ef80bb0f4" Effect="Deny">
  40         <Description>Default is DENY</Description>
  41     </Rule>
  42 </Policy>