On Sat, Jun 20, 2015 at 9:04 AM, Abimaran Kugathasan <[email protected]>
wrote:

> Hi Harsha,
>
> Please find the policy.
>
> <Policy PolicyId=" urn:oasis:names:tc:xacml:3.0:example:SimplePolicy"
> RuleCombiningAlgId=
> "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:first-applicable"
> xmlns="urn:oasis:names:tc:xacml:3.0:core:schema:wd-17">
>     <Description>Sample XACML Authorization Policy.</Description>
>     <Target/>
>     <Rule
>         RuleId= "urn:oasis:names:tc:xacml:3.0:example:SimpleRule1"
>         Effect="Permit">
>         <Description>
>             Sample XACML Authorization Policy.
>         </Description>
>         <Target>
>             <AnyOf>
>                 <AllOf>
>                     <Match
>                         MatchId=
> "urn:oasis:names:tc:xacml:1.0:function:string-regexp-match">
>                         <AttributeValue DataType="
> http://www.w3.org/2001/XMLSchema#string";
> <http://www.w3.org/2001/XMLSchema#string>>
> http://localhost:8280/services/echo/</AttributeValue>
>                         <AttributeDesignator
>                         MustBePresent="false"
>                         Category=
> "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject"
>                         AttributeId=
> "urn:oasis:names:tc:xacml:1.0:resource:resource-id"
>                         DataType="http://www.w3.org/2001/XMLSchema#string";
> <http://www.w3.org/2001/XMLSchema#string>/>
>                     </Match>
>                 </AllOf>
>             </AnyOf>
>         </Target>
>     </Rule>
> </Policy>
>
> No, I haven't install any patches or SPs.
>
> On Sat, Jun 20, 2015 at 9:00 AM, Harsha Thirimanna <[email protected]>
> wrote:
>
>> We don't need to specify the XACML version , because it is already
>> available in the policy as a name space.
>> Can you attach policy file ,
>> Did you try this with IS SP1 ?
>> On Jun 20, 2015 8:48 AM, "Abimaran Kugathasan" <[email protected]> wrote:
>>
>>> Hi,
>>>
>>> When I tried sample policy given as sample in [1], I got following error
>>> in the UI.
>>>
>>>
>>> Entitlement policy is not updated. Error is :Invalid Entitlement Policy.
>>>> Policy is not valid according to XACML schema
>>>
>>>
>>> I'm getting same for the sample [2].
>>>
>>>
>>> IS 5.0.0 supports both XACML 2.0.and 3.0 specification. Do I have to set
>>> which version should support in a configuration file?
>>>
>>> [1] :
>>> https://docs.wso2.com/display/IS500/Writing+XACML+3+Policies+in+WSO2+Identity+Server+-+1
>>> [2] :
>>> https://docs.wso2.com/display/IS500/Writing+XACML+policies+in+WSO2+Identity+Server+-+1
>>>
>>> --
>>> Thanks
>>> Abimaran Kugathasan
>>>
>>> Software Engineer | WSO2 Inc
>>> Data & APIs Technologies Team
>>> Mobile : +94 773922820
>>>
>>> <http://stackoverflow.com/users/515034>
>>> <http://lk.linkedin.com/in/abimaran>
>>> <http://www.lkabimaran.blogspot.com/>  <https://github.com/abimarank>
>>> <https://twitter.com/abimaran>
>>>
>>>
>>> _______________________________________________
>>> Dev mailing list
>>> [email protected]
>>> http://wso2.org/cgi-bin/mailman/listinfo/dev
>>>
>>>
>
>
> --
> Thanks
> Abimaran Kugathasan
>
> Software Engineer | WSO2 Inc
> Data & APIs Technologies Team
> Mobile : +94 773922820
>
> <http://stackoverflow.com/users/515034>
> <http://lk.linkedin.com/in/abimaran>
> <http://www.lkabimaran.blogspot.com/>  <https://github.com/abimarank>
> <https://twitter.com/abimaran>
>
>


-- 
Thanks
Abimaran Kugathasan

Software Engineer | WSO2 Inc
Data & APIs Technologies Team
Mobile : +94 773922820

<http://stackoverflow.com/users/515034>
<http://lk.linkedin.com/in/abimaran>  <http://www.lkabimaran.blogspot.com/>
<https://github.com/abimarank>  <https://twitter.com/abimaran>
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to