Hi Harsha,

Please find the policy.

<Policy PolicyId=" urn:oasis:names:tc:xacml:3.0:example:SimplePolicy"
RuleCombiningAlgId=
"urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:first-applicable"
xmlns="urn:oasis:names:tc:xacml:3.0:core:schema:wd-17">
    <Description>Sample XACML Authorization Policy.</Description>
    <Target/>
    <Rule
        RuleId= "urn:oasis:names:tc:xacml:3.0:example:SimpleRule1"
        Effect="Permit">
        <Description>
            Sample XACML Authorization Policy.
        </Description>
        <Target>
            <AnyOf>
                <AllOf>
                    <Match
                        MatchId=
"urn:oasis:names:tc:xacml:1.0:function:string-regexp-match">
                        <AttributeValue DataType="
http://www.w3.org/2001/XMLSchema#string";
<http://www.w3.org/2001/XMLSchema#string>>
http://localhost:8280/services/echo/</AttributeValue>
                        <AttributeDesignator
                        MustBePresent="false"
                        Category=
"urn:oasis:names:tc:xacml:1.0:subject-category:access-subject"
                        AttributeId=
"urn:oasis:names:tc:xacml:1.0:resource:resource-id"
                        DataType="http://www.w3.org/2001/XMLSchema#string";
<http://www.w3.org/2001/XMLSchema#string>/>
                    </Match>
                </AllOf>
            </AnyOf>
        </Target>
    </Rule>
</Policy>

No, I haven't install any patches or SPs.

On Sat, Jun 20, 2015 at 9:00 AM, Harsha Thirimanna <[email protected]> wrote:

> We don't need to specify the XACML version , because it is already
> available in the policy as a name space.
> Can you attach policy file ,
> Did you try this with IS SP1 ?
> On Jun 20, 2015 8:48 AM, "Abimaran Kugathasan" <[email protected]> wrote:
>
>> Hi,
>>
>> When I tried sample policy given as sample in [1], I got following error
>> in the UI.
>>
>>
>> Entitlement policy is not updated. Error is :Invalid Entitlement Policy.
>>> Policy is not valid according to XACML schema
>>
>>
>> I'm getting same for the sample [2].
>>
>>
>> IS 5.0.0 supports both XACML 2.0.and 3.0 specification. Do I have to set
>> which version should support in a configuration file?
>>
>> [1] :
>> https://docs.wso2.com/display/IS500/Writing+XACML+3+Policies+in+WSO2+Identity+Server+-+1
>> [2] :
>> https://docs.wso2.com/display/IS500/Writing+XACML+policies+in+WSO2+Identity+Server+-+1
>>
>> --
>> Thanks
>> Abimaran Kugathasan
>>
>> Software Engineer | WSO2 Inc
>> Data & APIs Technologies Team
>> Mobile : +94 773922820
>>
>> <http://stackoverflow.com/users/515034>
>> <http://lk.linkedin.com/in/abimaran>
>> <http://www.lkabimaran.blogspot.com/>  <https://github.com/abimarank>
>> <https://twitter.com/abimaran>
>>
>>
>> _______________________________________________
>> Dev mailing list
>> [email protected]
>> http://wso2.org/cgi-bin/mailman/listinfo/dev
>>
>>


-- 
Thanks
Abimaran Kugathasan

Software Engineer | WSO2 Inc
Data & APIs Technologies Team
Mobile : +94 773922820

<http://stackoverflow.com/users/515034>
<http://lk.linkedin.com/in/abimaran>  <http://www.lkabimaran.blogspot.com/>
<https://github.com/abimarank>  <https://twitter.com/abimaran>
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to