├── .gitignore ├── CHANGELOG.md ├── CONTRIBUTING.md ├── LICENSE ├── LICENSE_HEADER.txt ├── LICENSE_HEADER_DEFS.xml ├── README.md ├── owasp-dependency-check-suppression.xml ├── pom.xml ├── spotbugs-security-exclude.xml └── src ├── main ├── java │ └── org │ │ └── ow2 │ │ └── authzforce │ │ └── xacml │ │ └── json │ │ └── model │ │ ├── LimitsCheckingJSONObject.java │ │ ├── SpringBasedJsonSchemaClient.java │ │ └── XacmlJsonUtils.java └── resources │ └── org │ └── ow2 │ └── authzforce │ └── xacml │ └── json │ └── model │ ├── Policy.schema.json │ ├── Request.schema.json │ ├── Response.schema.json │ ├── common-ng.schema.json │ └── common-std.schema.json └── test ├── java └── org │ └── ow2 │ └── authzforce │ └── xacml │ └── json │ └── model │ └── test │ ├── LimitsCheckingJSONObjectTest.java │ ├── TestDataProvider.java │ └── XacmlJsonSchemaValidationTest.java └── resources ├── .gitignore ├── build.xml ├── dummy.xml ├── ivy.xml ├── json.samples ├── invalid │ ├── tooBigStringKey.json │ ├── tooBigStringKeyDeeper.json │ ├── tooBigStringValue.json │ ├── tooBigStringValueDeeper.json │ ├── tooBigStringValueInArray.json │ ├── tooBigStringValueInArrayDeeper.json │ ├── tooDeepArray.json │ ├── tooDeepJsonObject.json │ ├── tooDeepMixJsonObjectAndArray.json │ ├── tooManyArrayItems.json │ ├── tooManyArrayItemsDeeper.json │ ├── tooManyKeys.json │ └── tooManyKeysDeeper.json └── valid │ ├── notTooBigStringKey.json │ ├── notTooBigStringKeyDeeper.json │ ├── notTooBigStringValue.json │ ├── notTooBigStringValueDeeper.json │ ├── notTooBigStringValueInArray.json │ ├── notTooBigStringValueInArrayDeeper.json │ ├── notTooDeepArray.json │ ├── notTooDeepJsonObject.json │ ├── notTooDeepMixJsonObjectAndArray.json │ ├── notTooManyArrayItems.json │ ├── notTooManyArrayItemsDeeper.json │ ├── notTooManyKeys.json │ └── notTooManyKeysDeeper.json ├── logback.xml ├── xacml+json.samples ├── Policies │ └── valid │ │ ├── driver-access-policy.xacml.json │ │ ├── minimal+target.json │ │ ├── minimal.json │ │ ├── policyRef.json │ │ └── sub-policies.json ├── Requests │ ├── invalid │ │ ├── Attribute-Value-array-mixed-string-boolean.json │ │ ├── Attribute-Value-array-null.json │ │ ├── Attribute-Value-missing.json │ │ ├── Attribute-Value-null.json │ │ ├── Attribute-item-additional-property.json │ │ ├── Category-array-item-additional-property.json │ │ ├── Category-array-item-empty-object.json │ │ ├── Category-value-array-empty.json │ │ ├── Category-value-object.json │ │ ├── Request-additional-property.json │ │ ├── Request-value-array.json │ │ ├── Request-value-object-empty.json │ │ ├── ReturnPolicyIdList-value-number.json │ │ ├── additional-property.json │ │ └── spec-8.1-request-example-orig.json │ └── valid │ │ ├── Attribute-Value-array-empty.json │ │ ├── Attribute-Value-array-mixed-string-number.json │ │ ├── Attribute-Value-array-number.json │ │ ├── Attribute-Value-array-object.json │ │ ├── Attribute-Value-array-string.json │ │ ├── Attribute-Value-number.json │ │ ├── Attribute-Value-object.json │ │ ├── Attribute-array-empty.json │ │ ├── Category-single.json │ │ ├── ReturnPolicyIdList-present-after-Category.json │ │ ├── ReturnPolicyIdList-present-before-Category.json │ │ └── spec-8.1-request-example-fixed.json └── Responses │ ├── invalid │ ├── AttributeAssignment-additional-property.json │ ├── Decision-value-invalid.json │ ├── IdReference-additional-property.json │ ├── Obligation-additional-property.json │ ├── Obligations-value-array-empty.json │ ├── PolicyIdentifierList-additional-property.json │ ├── Response-value-array-empty.json │ ├── Response-value-array-item-empty-object.json │ ├── Response-value-null.json │ ├── Result-additional-property.json │ └── additional-property.json │ └── valid │ ├── Category-value-array-empty.json │ ├── Category-value-array-single-item.json │ ├── Category-value-object.json │ ├── Obligation-with-AttributeAssignment.json │ ├── Obligations-value-array-multiple-items-without-AttributeAssignment.json │ ├── PolicyIdentifierList-value-Policy(Set)IdReference-array-empty.json │ ├── PolicyIdentifierList-value-PolicyIdReference-single.json │ ├── PolicyIdentifierList-value-object-empty.json │ ├── StatusCode-nested.json │ ├── StatusCode-ok.json │ ├── multiple-Decisions.json │ └── spec-8.2-response-example.json ├── xacml+xml.samples └── xacml-3.0-ct │ ├── README.md │ ├── mandatory │ ├── IIA001 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA003 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA006 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA007 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA008 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA009 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA011 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA013 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA014 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA015 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA016_FIXED │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA017 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA018_FIXED │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA019 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA020_FIXED │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA021 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA022_FIXED_NO_CONTENT_NO_XPATH │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIA023_FIXED_NO_CONTENT_NO_XPATH │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA001 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA002 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA003 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA004 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA005 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA006 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA007 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA008 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA009 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA010 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA011 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA012 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA013 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA014 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA015 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA016 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA017 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA018 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA019 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA020 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA021 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA022 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA023 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA024 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA025 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA026 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA027 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA028 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA301 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA302 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA303 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA304 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA305 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA306 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA307 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA308 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA309 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA310 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA311 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA312 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA313 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA314 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA315 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA316 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA317 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA318 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA319 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA320 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA321 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA322 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA323 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA324 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA325 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA326 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA327 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA328 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ ├── IIIA329 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ └── IIIA340 │ │ ├── Policy.xml │ │ ├── Request.xml │ │ └── Response.xml │ └── optional │ ├── IIA002 │ ├── AttributeProvider.xml │ ├── Policy.xml │ ├── Request.xml │ ├── Response.xml │ └── Special.txt │ ├── IIA022_23_FIXED_WITH_XPATH │ ├── Policy.xml │ ├── Request.xml │ ├── Response.json │ └── Response.xml │ ├── IIA023_FIXED_WITH_XPATH │ ├── Policy.xml │ ├── Request.xml │ └── Response.xml │ ├── IIF300_301_FIXED_WITH_XPATH │ ├── Policy.xml │ ├── Request.xml │ └── Response.xml │ ├── IIF301_FIXED_WITH_XPATH │ ├── Policy.xml │ ├── Request.xml │ └── Response.xml │ ├── IIF310_FIXED_WITH_XPATH │ ├── Policy.xml │ ├── Request.xml │ └── Response.xml │ ├── IIIA030 │ ├── Policy.xml │ ├── Request.xml │ └── Response.xml │ ├── IIIA330 │ ├── Policy.xml │ ├── Request.xml │ └── Response.xml │ ├── IIIE302 │ ├── Policy.xml │ ├── Request.xml │ └── Response.xml │ ├── IIIF001 │ ├── Policy.xml │ ├── Request.xml │ ├── Response.xml │ └── Special.txt │ ├── IIIF002 │ ├── Policy.xml │ ├── Request.xml │ ├── Response.xml │ └── Special.txt │ ├── IIIF003 │ ├── Policy.xml │ ├── Request.xml │ ├── Response.xml │ └── Special.txt │ ├── IIIF004 │ ├── Policy.xml │ ├── Request.xml │ ├── Response.xml │ └── Special.txt │ ├── IIIF005 │ ├── Policy.xml │ ├── Request.xml │ ├── Response.xml │ └── Special.txt │ ├── IIIF006 │ ├── Policy.xml │ ├── Request.xml │ ├── Response.xml │ └── Special.txt │ ├── IIIF007 │ ├── Policy.xml │ ├── Request.xml │ ├── Response.xml │ └── Special.txt │ ├── IIIG001 │ ├── Policy.xml │ ├── Request.xml │ └── Response.xml │ ├── IIIG301 │ ├── Policy.xml │ ├── Request.xml │ └── Response.xml │ ├── IIIG302 │ ├── Policy.xml │ ├── Request.xml │ └── Response.xml │ └── README.md ├── xacml-common-xml-to-json.xsl ├── xacml-policy-json-to-xml.xsl ├── xacml-policy-xml-to-json.xsl ├── xacml-request-xml-to-json.xsl └── xacml-response-xml-to-json.xsl /.gitignore: -------------------------------------------------------------------------------- 1 | /.settings/ 2 | /target/ 3 | /test-output/ 4 | /.classpath 5 | /.pmd 6 | /.project 7 | **/.idea 8 | *.iml 9 | -------------------------------------------------------------------------------- /CONTRIBUTING.md: -------------------------------------------------------------------------------- 1 | ## Contributing 2 | ### Contribution Rules 3 | 1. No SNAPSHOT dependencies on "develop" and obviously "master" branches 4 | 5 | ### Releasing 6 | 1. From the develop branch, prepare a release (example using a HTTP proxy): 7 | 

 8 |     $ mvn -Dhttps.proxyHost=proxyhostname -Dhttps.proxyPort=80 jgitflow:release-start
 9 |
10 | 1. Update the CHANGELOG according to keepachangelog.com. 11 | 1. To perform the release (example using a HTTP proxy): 12 | 

13 |     $ mvn -Dhttps.proxyHost=proxyhostname -Dhttps.proxyPort=80 jgitflow:release-finish
14 |
15 | If, after deployment, the command does not succeed because of some issue with the branches. Fix the issue, then re-run the same command but with 'noDeploy' option set to true to avoid re-deployment: 16 | 

17 |     $ mvn -Dhttps.proxyHost=proxyhostname -Dhttps.proxyPort=80 -DnoDeploy=true jgitflow:release-finish
18 |
19 | If the command fails because of a gpg error such as "no gpg-agent available to this session" or "no pinentry", make sure you have installed a pinentry program (e.g. with package `pinentry-gnome3`), and that a gpg-agent is running with this pinentry program, for example: 20 | 

21 |     $ gpg-agent --daemon --pinentry-program /usr/bin/pinentry-gnome3
22 |
23 | Then re-run the mvn command as above. 24 | 1. Connect and log in to the OSS Nexus Repository Manager: https://oss.sonatype.org/ 25 | 1. Go to Staging Profiles and select the pending repository authzforce-*... you just uploaded with `jgitflow:release-finish` 26 | 1. Click the Release button to release to Maven Central. 27 | 28 | More info on jgitflow: http://jgitflow.bitbucket.org/ 29 | -------------------------------------------------------------------------------- /LICENSE_HEADER.txt: -------------------------------------------------------------------------------- 1 | Copyright ${inceptionYear}-${currentYear} ${copyrightOwner}. 2 | 3 | This file is part of ${projectName}. 4 | 5 | Licensed under the Apache License, Version 2.0 (the "License"); 6 | you may not use this file except in compliance with the License. 7 | You may obtain a copy of the License at 8 | 9 | http://www.apache.org/licenses/LICENSE-2.0 10 | 11 | Unless required by applicable law or agreed to in writing, software 12 | distributed under the License is distributed on an "AS IS" BASIS, 13 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 14 | See the License for the specific language governing permissions and 15 | limitations under the License. 16 | 17 | -------------------------------------------------------------------------------- /LICENSE_HEADER_DEFS.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | /* 5 | * 6 | */ 7 | 8 | 9 | (\s|\t)*/\*.*$ 10 | .*\*/(\s|\t)*$ 11 | false 12 | true 13 | false 14 | 15 | 16 | 17 | -------------------------------------------------------------------------------- /owasp-dependency-check-suppression.xml: -------------------------------------------------------------------------------- 1 | 2 | 4 | 5 | 8 | ^pkg:maven/org\.json/json@.*$ 9 | CVE-2022-45688 10 | 11 | -------------------------------------------------------------------------------- /spotbugs-security-exclude.xml: -------------------------------------------------------------------------------- 1 | 2 | 7 | 8 | 9 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | -------------------------------------------------------------------------------- /src/test/resources/.gitignore: -------------------------------------------------------------------------------- 1 | /lib/ 2 | -------------------------------------------------------------------------------- /src/test/resources/dummy.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | -------------------------------------------------------------------------------- /src/test/resources/ivy.xml: -------------------------------------------------------------------------------- 1 | 2 | 22 | 24 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | -------------------------------------------------------------------------------- /src/test/resources/json.samples/invalid/tooBigStringKey.json: -------------------------------------------------------------------------------- 1 | { 2 | "aaaaaaaaaaa": true 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/invalid/tooBigStringKeyDeeper.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": {"aaaaaaaaaaa": true} 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/invalid/tooBigStringValue.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "aaaaaaaaaaa" 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/invalid/tooBigStringValueDeeper.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": {"a": "aaaaaaaaaaa"} 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/invalid/tooBigStringValueInArray.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": ["aaaaaaaaaaa"] 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/invalid/tooBigStringValueInArrayDeeper.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": {"a": ["aaaaaaaaaaa"]} 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/invalid/tooDeepArray.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": 3 | [ 4 | [ 5 | [true] 6 | ] 7 | ] 8 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/invalid/tooDeepJsonObject.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": 3 | { 4 | "a": 5 | { 6 | "a": 7 | { 8 | "a": true 9 | } 10 | } 11 | } 12 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/invalid/tooDeepMixJsonObjectAndArray.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": 3 | [ 4 | { 5 | "a": 6 | [ 7 | "a" 8 | ] 9 | } 10 | ] 11 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/invalid/tooManyArrayItems.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": [true, true, true] 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/invalid/tooManyArrayItemsDeeper.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": {"a": [true, true, true]} 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/invalid/tooManyKeys.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": true, "b": true, "c": true 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/invalid/tooManyKeysDeeper.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": 3 | { 4 | "a": true, 5 | "b": true, 6 | "c": true 7 | } 8 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/valid/notTooBigStringKey.json: -------------------------------------------------------------------------------- 1 | { 2 | "aaaaaaaaaa": true 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/valid/notTooBigStringKeyDeeper.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": {"aaaaaaaaaa": true} 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/valid/notTooBigStringValue.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "aaaaaaaaaa" 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/valid/notTooBigStringValueDeeper.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": {"a": "aaaaaaaaaa"} 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/valid/notTooBigStringValueInArray.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": ["aaaaaaaaaa"] 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/valid/notTooBigStringValueInArrayDeeper.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": {"a": ["aaaaaaaaaa"]} 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/valid/notTooDeepArray.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": 3 | [ 4 | [ 5 | true 6 | ] 7 | ] 8 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/valid/notTooDeepJsonObject.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": 3 | { 4 | "a": 5 | { 6 | "a": true 7 | } 8 | } 9 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/valid/notTooDeepMixJsonObjectAndArray.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": 3 | [ 4 | { 5 | "a": true 6 | } 7 | ] 8 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/valid/notTooManyArrayItems.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": [true, true] 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/valid/notTooManyArrayItemsDeeper.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": {"a": [true, true]} 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/valid/notTooManyKeys.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": true, "b": true 3 | } -------------------------------------------------------------------------------- /src/test/resources/json.samples/valid/notTooManyKeysDeeper.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": 3 | { 4 | "a": true, 5 | "b": true 6 | } 7 | } -------------------------------------------------------------------------------- /src/test/resources/logback.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | %-4r [%t] [%d] %5p [%C:%M] \(%F:%L\) - %m%n 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Policies/valid/minimal+target.json: -------------------------------------------------------------------------------- 1 | { 2 | "policy": { 3 | "id": "minimal+target", 4 | "target": [ 5 | [ 6 | [{ 7 | "matchFunc": "urn:oasis:names:tc:xacml:1.0:function:string-equal", 8 | "matchedValue": "TOPIC", 9 | "attrDesignator": { 10 | "category": "urn:oasis:names:tc:xacml:3.0:attribute-category:resource", 11 | "attrId": "urn:thalesgroup:xacml:resource:resource-type", 12 | "dataType": "http://www.w3.org/2001/XMLSchema#string", 13 | "mustBePresent": true 14 | } 15 | }] 16 | ] 17 | ], 18 | "combinerId": "urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:deny-unless-permit" 19 | } 20 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Policies/valid/minimal.json: -------------------------------------------------------------------------------- 1 | { 2 | "policy": { 3 | "id": "minimal", 4 | "combinerId": "urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:deny-unless-permit" 5 | } 6 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Policies/valid/policyRef.json: -------------------------------------------------------------------------------- 1 | { 2 | "policy": { 3 | "id": "root", 4 | "version": "1.0", 5 | "desc": "Currently, there is only one 'policyRef' for Kafka resource type 'TOPIC', but there may be other resource types added in the future, such as GROUP and CLUSTER", 6 | "combinerId": "urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:deny-unless-permit", 7 | "combinerArgs": [ 8 | { "rule": 9 | { 10 | "id": "Superadmin", 11 | "effect": "Permit", 12 | "target": [ 13 | [ 14 | [ 15 | { 16 | "matchFunc": "urn:oasis:names:tc:xacml:1.0:function:string-equal", 17 | "matchedValue": "User:admin", 18 | "attrDesignator": { 19 | "category": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 20 | "attrId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id", 21 | "dataType": "http://www.w3.org/2001/XMLSchema#string", 22 | "mustBePresent": true 23 | } 24 | } 25 | ] 26 | ] 27 | ] 28 | } 29 | }, 30 | { 31 | "policyRef": { 32 | "id": "resource.type=TOPIC" 33 | } 34 | } 35 | ] 36 | } 37 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/Attribute-Value-array-mixed-string-boolean.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id", 12 | "Value": ["one", true] 13 | } 14 | ] 15 | } 16 | ] 17 | } 18 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/Attribute-Value-array-null.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id", 12 | "Value": [null] 13 | } 14 | ] 15 | } 16 | ] 17 | } 18 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/Attribute-Value-missing.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id" 12 | } 13 | ] 14 | } 15 | ] 16 | } 17 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/Attribute-Value-null.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id", 12 | "Value": null 13 | } 14 | ] 15 | } 16 | ] 17 | } 18 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/Attribute-item-additional-property.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "Bad": "stuff", 12 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id", 13 | "Value": "Andreas" 14 | } 15 | ] 16 | } 17 | ] 18 | } 19 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/Category-array-item-additional-property.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Bad": "stuff" 9 | } 10 | ] 11 | } 12 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/Category-array-item-empty-object.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | 8 | } 9 | ] 10 | } 11 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/Category-value-array-empty.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": [] 5 | } 6 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/Category-value-object.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": {} 5 | } 6 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/Request-additional-property.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject" 8 | } 9 | ], 10 | 11 | "Bad": "" 12 | } 13 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/Request-value-array.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": [] 3 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/Request-value-object-empty.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": {} 3 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/ReturnPolicyIdList-value-number.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "ReturnPolicyIdList": 1, 5 | "Category": 6 | [ 7 | { 8 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject" 9 | } 10 | ] 11 | } 12 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/additional-property.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject" 8 | } 9 | ] 10 | }, 11 | 12 | "Bad": "stuff" 13 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/invalid/spec-8.1-request-example-orig.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "AttributeId": "subject-id", 12 | "Value": "Andreas" 13 | }, 14 | 15 | { 16 | " AttributeId": "location", 17 | "Value": "Gamla Stan" 18 | } 19 | ] 20 | }, 21 | 22 | { 23 | "CategoryId": "urn:oasis:names:tc:xacml:3.0:attribute-category:action", 24 | "Attribute": 25 | { 26 | "AttributeId": "action-id", 27 | "Value": "http://example.com/buy", 28 | "DataType": "anyURI" 29 | } 30 | }, 31 | 32 | { 33 | "CategoryId": "urn:oasis:names:tc:xacml:3.0:attribute-category:resource", 34 | "Attribute": 35 | [ 36 | { 37 | "AttributeId": "book-title", 38 | "Value": "Learn German in 90 days" 39 | }, 40 | 41 | { 42 | "AttributeId": "currency", 43 | "Value": "SEK" 44 | }, 45 | 46 | { 47 | "AttributeId": "price", 48 | "Value": 123.34 49 | } 50 | ] 51 | } 52 | ] 53 | } 54 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/valid/Attribute-Value-array-empty.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id", 12 | "Value": [] 13 | } 14 | ] 15 | } 16 | ] 17 | } 18 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/valid/Attribute-Value-array-mixed-string-number.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id", 12 | "Value": ["one", 2] 13 | } 14 | ] 15 | } 16 | ] 17 | } 18 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/valid/Attribute-Value-array-number.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id", 12 | "Value": [1] 13 | } 14 | ] 15 | } 16 | ] 17 | } 18 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/valid/Attribute-Value-array-object.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id", 12 | "Value": [{}, {"key":null}, {"key": "value"}] 13 | } 14 | ] 15 | } 16 | ] 17 | } 18 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/valid/Attribute-Value-array-string.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id", 12 | "Value": ["one", "two"] 13 | } 14 | ] 15 | } 16 | ] 17 | } 18 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/valid/Attribute-Value-number.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id", 12 | "Value": 1 13 | } 14 | ] 15 | } 16 | ] 17 | } 18 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/valid/Attribute-Value-object.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id", 12 | "Value": {} 13 | } 14 | ] 15 | } 16 | ] 17 | } 18 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/valid/Attribute-array-empty.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | 11 | ] 12 | } 13 | ] 14 | } 15 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/valid/Category-single.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject" 8 | } 9 | ] 10 | } 11 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/valid/ReturnPolicyIdList-present-after-Category.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject" 8 | } 9 | ], 10 | 11 | "ReturnPolicyIdList": true 12 | } 13 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/valid/ReturnPolicyIdList-present-before-Category.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "ReturnPolicyIdList": true, 5 | "Category": 6 | [ 7 | { 8 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject" 9 | } 10 | ] 11 | } 12 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Requests/valid/spec-8.1-request-example-fixed.json: -------------------------------------------------------------------------------- 1 | { 2 | "Request": 3 | { 4 | "Category": 5 | [ 6 | { 7 | "CategoryId": "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject", 8 | "Attribute": 9 | [ 10 | { 11 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:subject:subject-id", 12 | "Value": "Andreas" 13 | }, 14 | 15 | { 16 | "AttributeId": "urn:example:subject:location", 17 | "Value": "Gamla Stan" 18 | } 19 | ] 20 | }, 21 | 22 | { 23 | "CategoryId": "urn:oasis:names:tc:xacml:3.0:attribute-category:action", 24 | "Attribute": 25 | [ 26 | { 27 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:action:action-id", 28 | "Value": "http://example.com/buy", 29 | "DataType": "http://www.w3.org/2001/XMLSchema#anyURI" 30 | } 31 | ] 32 | }, 33 | 34 | { 35 | "CategoryId": "urn:oasis:names:tc:xacml:3.0:attribute-category:resource", 36 | "Attribute": 37 | [ 38 | { 39 | "AttributeId": "urn:example:resource:book-title", 40 | "Value": "Learn German in 90 days" 41 | }, 42 | 43 | { 44 | "AttributeId": "urn:example:resource:currency", 45 | "Value": "SEK" 46 | }, 47 | 48 | { 49 | "AttributeId": "urn:example:resource:price", 50 | "Value": 123.34 51 | } 52 | ] 53 | } 54 | ] 55 | } 56 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/invalid/AttributeAssignment-additional-property.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "Obligations": 7 | [ 8 | { 9 | "Id": "urn:oasis:names:tc:xacml:example:obligation:email", 10 | "AttributeAssignment": 11 | [ 12 | { 13 | "AttributeId": "urn:oasis:names:tc:xacml:3.0:example:attribute:text", 14 | "Value": "Your medical record has been accessed", 15 | "Bad": "stuff" 16 | } 17 | ] 18 | } 19 | ] 20 | } 21 | ] 22 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/invalid/Decision-value-invalid.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Invalid" 6 | } 7 | ] 8 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/invalid/IdReference-additional-property.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "PolicyIdentifierList": 7 | { 8 | "PolicyIdReference": 9 | [ 10 | { 11 | "Id": "urn:oasis:names:tc:xacml:3.0:example:SimplePolicy1", 12 | "Bad": "stuff" 13 | } 14 | ] 15 | } 16 | } 17 | ] 18 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/invalid/Obligation-additional-property.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "Obligations": 7 | [ 8 | { 9 | "Id": "urn:oasis:names:tc:xacml:example:obligation:email", 10 | "Bad": "stuff" 11 | } 12 | ] 13 | } 14 | ] 15 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/invalid/Obligations-value-array-empty.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "Obligations":[] 7 | } 8 | ] 9 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/invalid/PolicyIdentifierList-additional-property.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "PolicyIdentifierList": 7 | { 8 | "PolicyIdReference": 9 | [ 10 | { 11 | "Id": "urn:oasis:names:tc:xacml:3.0:example:SimplePolicy1" 12 | } 13 | ], 14 | 15 | "Bad": "stuff" 16 | } 17 | } 18 | ] 19 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/invalid/Response-value-array-empty.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": [] 3 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/invalid/Response-value-array-item-empty-object.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": [{}] 3 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/invalid/Response-value-null.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": null 3 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/invalid/Result-additional-property.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "Bad":"stuff" 7 | } 8 | ] 9 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/invalid/additional-property.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit" 6 | } 7 | ], 8 | 9 | "Bad": "stuff" 10 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/valid/Category-value-array-empty.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "Category": 7 | [ 8 | 9 | ] 10 | } 11 | ] 12 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/valid/Category-value-array-single-item.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "Category": 7 | [ 8 | { 9 | "CategoryId": "urn:oasis:names:tc:xacml:3.0:attribute-category:action", 10 | "Attribute": 11 | [ 12 | { 13 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:action:action-id", 14 | "Value": "http://example.com/buy", 15 | "DataType": "http://www.w3.org/2001/XMLSchema#anyURI" 16 | } 17 | ] 18 | } 19 | ] 20 | } 21 | ] 22 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/valid/Category-value-object.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "Category": 7 | { 8 | "CategoryId": "urn:oasis:names:tc:xacml:3.0:attribute-category:action", 9 | "Attribute": 10 | [ 11 | { 12 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:action:action-id", 13 | "Value": "http://example.com/buy", 14 | "DataType": "http://www.w3.org/2001/XMLSchema#anyURI" 15 | } 16 | ] 17 | } 18 | } 19 | ] 20 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/valid/Obligation-with-AttributeAssignment.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "Obligations": 7 | [ 8 | { 9 | "Id": "urn:oasis:names:tc:xacml:example:obligation:email", 10 | "AttributeAssignment": 11 | [ 12 | { 13 | "AttributeId": "urn:oasis:names:tc:xacml:3.0:example:attribute:text", 14 | "Value": "Your medical record has been accessed" 15 | } 16 | ] 17 | }, 18 | 19 | { 20 | "Id": "urn:oasis:names:tc:xacml:example:obligation:log" 21 | } 22 | ] 23 | } 24 | ] 25 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/valid/Obligations-value-array-multiple-items-without-AttributeAssignment.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "Obligations": 7 | [ 8 | { 9 | "Id": "urn:oasis:names:tc:xacml:example:obligation:email" 10 | }, 11 | { 12 | "Id": "urn:oasis:names:tc:xacml:example:obligation:log" 13 | } 14 | ] 15 | } 16 | ] 17 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/valid/PolicyIdentifierList-value-Policy(Set)IdReference-array-empty.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "PolicyIdentifierList": {"PolicyIdReference": [], "PolicySetIdReference": []} 7 | } 8 | ] 9 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/valid/PolicyIdentifierList-value-PolicyIdReference-single.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "PolicyIdentifierList": 7 | { 8 | "PolicyIdReference": 9 | [ 10 | { 11 | "Id": "urn:oasis:names:tc:xacml:3.0:example:SimplePolicy1", 12 | "Version": "1.0" 13 | } 14 | ] 15 | } 16 | } 17 | ] 18 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/valid/PolicyIdentifierList-value-object-empty.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "PolicyIdentifierList": {} 7 | } 8 | ] 9 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/valid/StatusCode-nested.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "Status": 7 | { 8 | "StatusCode": 9 | { 10 | "Value": "urn:oasis:names:tc:xacml:1.0:status:ok", 11 | "StatusCode": 12 | { 13 | "Value": "urn:oasis:names:tc:xacml:1.0:status:ok" 14 | } 15 | } 16 | } 17 | } 18 | ] 19 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/valid/StatusCode-ok.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "Status": 7 | { 8 | "StatusCode": 9 | { 10 | "Value": "urn:oasis:names:tc:xacml:1.0:status:ok" 11 | } 12 | } 13 | } 14 | ] 15 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/valid/multiple-Decisions.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit", 6 | "Category": 7 | { 8 | "CategoryId": "urn:oasis:names:tc:xacml:3.0:attribute-category:action", 9 | "Attribute": 10 | [ 11 | { 12 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:action:action-id", 13 | "Value": "http://example.com/buy", 14 | "DataType": "http://www.w3.org/2001/XMLSchema#anyURI" 15 | } 16 | ] 17 | } 18 | }, 19 | { 20 | "Decision": "Deny", 21 | "Category": 22 | { 23 | "CategoryId": "urn:oasis:names:tc:xacml:3.0:attribute-category:action", 24 | "Attribute": 25 | [ 26 | { 27 | "AttributeId": "urn:oasis:names:tc:xacml:1.0:action:action-id", 28 | "Value": "http://example.com/sell", 29 | "DataType": "http://www.w3.org/2001/XMLSchema#anyURI" 30 | } 31 | ] 32 | } 33 | } 34 | ] 35 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+json.samples/Responses/valid/spec-8.2-response-example.json: -------------------------------------------------------------------------------- 1 | { 2 | "Response": 3 | [ 4 | { 5 | "Decision": "Permit" 6 | } 7 | ] 8 | } -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/README.md: -------------------------------------------------------------------------------- 1 | See authzforce-ce-core project's folder ``pdp-testutils/src/test/resources/conformance/xacml-3.0-from-2.0-ct/README.md`` for more info. -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA001/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 9 | 10 | http://medico.com/record/patient/BartSimpson 11 | 12 | 13 | 14 | 15 | read 16 | 17 | 18 | 19 | 20 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA001/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA003/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 9 | 10 | http://medico.com/record/patient/BartSimpson 11 | 12 | 13 | 14 | 15 | read 16 | 17 | 18 | 19 | 20 | 21 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA003/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA006/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | riddle me this 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA006/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA007/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 9 | 10 | http://medico.com/record/patient/BartSimpson 11 | 12 | 13 | 14 | 15 | read 16 | 17 | 18 | 19 | 20 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA007/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA008/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | riddle me this 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA008/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA009/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 9 | 10 | http://medico.com/record/patient/BartSimpson 11 | 12 | 13 | 14 | 15 | read 16 | 17 | 18 | 19 | 20 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA009/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA011/Policy.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | Policy for Conformance Test IIA011. 5 | 6 | 7 | 8 | 9 | Anyone who is 45 integer years old may perform any 10 | action on any resource. 11 | 12 | 13 | 14 | 15 | 16 | 17 | 45 18 | 19 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA011/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 46 12 | 13 | 14 | 15 | 16 | http://medico.com/record/patient/BartSimpson 17 | 18 | 19 | 20 | 21 | read 22 | 23 | 24 | 25 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA011/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA013/Policy.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | Policy for Conformance Test IIA013. 5 | 6 | 7 | 8 | 9 | Anyone who is 45 integer years old may perform any 10 | action on any resource. 11 | 12 | 13 | 14 | 15 | 16 | 17 | 45 18 | 19 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA013/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 46 12 | 13 | 14 | 15 | 16 | http://medico.com/record/patient/BartSimpson 17 | 18 | 19 | 20 | 21 | read 22 | 23 | 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA013/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA014/Policy.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | Policy for Conformance Test IIA014. 5 | 6 | 7 | 8 | 9 | Anyone who is 45 integer years old may perform any 10 | action on any resource. 11 | 12 | 13 | 14 | 15 | 16 | 17 | 45 18 | 19 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA014/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA015/Policy.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | Policy for Conformance Test IIA015. 5 | 6 | 7 | 8 | 9 | Anyone who is 45 integer years old may perform any 10 | action on any resource. 11 | 12 | 13 | 14 | 15 | 16 | 17 | 45 18 | 19 | 20 | 21 | 22 | 23 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA015/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA016_FIXED/Policy.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | Policy for Conformance Test IIA016. 5 | 6 | 7 | 8 | 9 | Anyone can perform any action on any resource if current-time 10 | is 08:23:47-05:00. 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 08:23:47-05:00 19 | 20 | 21 | 22 | 23 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA016_FIXED/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 9 | 10 | http://medico.com/record/patient/BartSimpson 11 | 12 | 13 | 14 | 15 | read 16 | 17 | 18 | 19 | 20 | 21 | 08:23:47-05:00 22 | 23 | 24 | 25 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA016_FIXED/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA017/Policy.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | Policy for Conformance Test IIA017. 5 | 6 | 7 | 8 | 9 | Anyone can perform any action on any resource if 10 | there is a current-time attribute. 11 | 12 | 13 | 14 | 15 | 16 | 17 | 1 18 | 19 | 20 | 21 | 22 | 23 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA017/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 9 | 10 | http://medico.com/record/patient/BartSimpson 11 | 12 | 13 | 14 | 15 | read 16 | 17 | 18 | 19 | 20 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA017/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA018_FIXED/Policy.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | Policy for Conformance Test IIA018. 5 | 6 | 7 | 8 | 9 | Anyone can perform any action on any resource if current-time 10 | is 05:23:47-05:00 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 2002-03-22 19 | 20 | 21 | 22 | 23 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA018_FIXED/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 9 | 10 | http://medico.com/record/patient/BartSimpson 11 | 12 | 13 | 14 | 15 | read 16 | 17 | 18 | 19 | 20 | 21 | 2002-03-22 22 | 23 | 24 | 25 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA018_FIXED/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA019/Policy.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | Policy for Conformance Test IIA019. 5 | 6 | 7 | 8 | 9 | Anyone can perform any action on any resource if 10 | there is a current-time attribute. 11 | 12 | 13 | 14 | 15 | 16 | 17 | 1 18 | 19 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA019/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 9 | 10 | http://medico.com/record/patient/BartSimpson 11 | 12 | 13 | 14 | 15 | read 16 | 17 | 18 | 19 | 20 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA019/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA020_FIXED/Policy.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | Policy for Conformance Test IIA020. 5 | 6 | 7 | 8 | 9 | Anyone can perform any action on any resource if current-time 10 | is 05:23:47-05:00 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 2002-03-22T08:23:47-05:00 19 | 20 | 21 | 22 | 23 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA020_FIXED/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 9 | 10 | http://medico.com/record/patient/BartSimpson 11 | 12 | 13 | 14 | 15 | read 16 | 17 | 18 | 19 | 20 | 21 | 2002-03-22T08:23:47-05:00 22 | 23 | 24 | 25 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA020_FIXED/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA021/Policy.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | Policy for Conformance Test IIA021. 5 | 6 | 7 | 8 | 9 | Anyone can perform any action on any resource if 10 | there is a current-time attribute. 11 | 12 | 13 | 14 | 15 | 16 | 17 | 1 18 | 19 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA021/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 9 | 10 | http://medico.com/record/patient/BartSimpson 11 | 12 | 13 | 14 | 15 | read 16 | 17 | 18 | 19 | 20 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIA021/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA002/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | J. Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA002/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Deny 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | assignment2 21 | 22 | 24 | assignment1 27 | assignment2 30 | 31 | 32 | 33 | 34 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA003/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | 27 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA003/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA004/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | 27 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA004/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA005/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | 27 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA005/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | assignment2 21 | 22 | 24 | assignment1 27 | assignment2 30 | 31 | 32 | 33 | 34 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA006/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | 27 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA006/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Deny 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | assignment2 21 | 22 | 24 | assignment1 27 | assignment2 30 | 31 | 32 | 33 | 34 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA007/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | 27 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA007/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA008/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | 27 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA008/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA009/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | 27 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA009/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | assignment2 21 | 22 | 24 | assignment1 27 | assignment2 30 | 31 | 32 | 33 | 34 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA010/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | 27 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA010/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Deny 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | assignment2 21 | 22 | 24 | assignment1 27 | assignment2 30 | 31 | 32 | 33 | 34 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA011/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | 27 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA011/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA012/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA015/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA016/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA016/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | 15 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA017/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA018/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA019/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA019/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA020/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA021/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA022/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA023/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA023/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA024/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA026/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA027/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA027/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA028/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA028/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA302/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | J. Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA302/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Deny 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | assignment2 21 | 22 | 24 | assignment1 27 | assignment2 30 | 31 | 32 | 33 | 34 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA303/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA304/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA305/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | assignment2 21 | 22 | 24 | assignment1 27 | assignment2 30 | 31 | 32 | 33 | 34 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA306/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Deny 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | assignment2 21 | 22 | 24 | assignment1 27 | assignment2 30 | 31 | 32 | 33 | 34 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA307/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA308/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA309/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | assignment2 21 | 22 | 24 | assignment1 27 | assignment2 30 | 31 | 32 | 33 | 34 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA310/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Deny 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | assignment2 21 | 22 | 24 | assignment1 27 | assignment2 30 | 31 | 32 | 33 | 34 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA311/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA312/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA315/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA316/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA316/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | 15 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA317/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA318/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA319/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA319/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA320/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA321/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA322/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA323/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA323/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA324/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA326/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA327/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA327/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | NotApplicable 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA328/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 45 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | 23 | 10 24 | 25 | 26 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA328/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/mandatory/IIIA329/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | assignment2 21 | 22 | 24 | assignment1 27 | assignment2 30 | 31 | 32 | 33 | 34 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIA002/AttributeProvider.xml: -------------------------------------------------------------------------------- 1 | 2 | 4 | 5 | 6 | Physician 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIA002/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 9 | 10 | http://medico.com/record/patient/BartSimpson 11 | 12 | 13 | 14 | 15 | read 16 | 17 | 18 | 19 | 20 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIA002/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIA002/Special.txt: -------------------------------------------------------------------------------- 1 | Test IIA002 requires the Context Handler to be able to obtain an 2 | Attribute from an external repository, where the required 3 | Attribute is not supplied in the physical request received 4 | from the PEP. 5 | 6 | The test as written uses an Attribute with 7 | AttributeId="urn:oasis:names:tc:xacml:1.0:example:attribute:role", 8 | value "Physician", and Subject named "Julius Hibbert". 9 | 10 | This test may be modified to use a different AttributeId and 11 | AttributeValue in the SubjectAttributeDesignator of the 12 | Policy.xml file, and a different Subject in the Request.xml file, 13 | so long as the SubjectAttributeDesignator refers to an attribute 14 | that is not present in the original input Request.xml file. Any 15 | modified version of the test must still demonstrate that the 16 | Context Handler is able to obtain values for particular 17 | attributes that are referenced in its policies, even if those 18 | attributes are not present in the Request as received from the 19 | PEP. 20 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIF300_301_FIXED_WITH_XPATH/Policy.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | Policy for Conformance Test IIF300. 5 | Purpose: new 3.0 feature: Content node may be on any category, not just Resources 6 | 7 | 8 | 9 | http://www.w3.org/TR/1999/REC-xpath-19991116 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 22 | //md:location 23 | 24 | 25 | 1 26 | 27 | 28 | 29 | 30 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIF300_301_FIXED_WITH_XPATH/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIF301_FIXED_WITH_XPATH/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 15 | http://medico.com/ABC_Hospital 18 | 19 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIF310_FIXED_WITH_XPATH/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIA030/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | //md:records/md:record 22 | 23 | 24 | 25 | 26 | 27 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIA330/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | //md:records/md:record 22 | 23 | 24 | 25 | 26 | 27 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIE302/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | 9 | 10 | Julius Hilbert 11 | 12 | 13 | 14 | 15 | http://medico.com/record/patient/BartSimpson 16 | 17 | 18 | 19 | 20 | read 21 | 22 | 23 | 24 | 25 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF001/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF001/Special.txt: -------------------------------------------------------------------------------- 1 | The XACML 1.0 specification does not explicitly 2 | define the way to convert each of the selected node set 3 | into a string representation so that the constructor 4 | functions can be applied. 5 | 6 | In these tests, it is assumed that: 7 | 1) An XML attribute node is converted into 8 | the string representation of the attribute value. 9 | 2) An XML text node is converted into 10 | the string representation of the text node content. 11 | 12 | In the DOM API, such a string representation can 13 | be obtained by org.w3c.dom.Node#getNodeValue. 14 | 15 | In XACML 1.1, this assumption will be true. 16 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF002/Request.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Julius Hibbert 6 | 7 | 8 | riddle me this 9 | 10 | 11 | 12 | 13 | http://medico.com/record/patient/BartSimpson 14 | 15 | 16 | 17 | 18 | read 19 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF002/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF002/Special.txt: -------------------------------------------------------------------------------- 1 | The XACML 1.0 specification does not explicitly 2 | define the way to convert each of the selected node set 3 | into a string representation so that the constructor 4 | functions can be applied. 5 | 6 | In these tests, it is assumed that: 7 | 1) An XML attribute node is converted into 8 | the string representation of the attribute value. 9 | 2) An XML text node is converted into 10 | the string representation of the text node content. 11 | 12 | In the DOM API, such a string representation can 13 | be obtained by org.w3c.dom.Node#getNodeValue. 14 | 15 | In XACML 1.1, this assumption will be true. 16 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF003/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF003/Special.txt: -------------------------------------------------------------------------------- 1 | The XACML 1.0 specification does not explicitly 2 | define the way to convert each of the selected node set 3 | into a string representation so that the constructor 4 | functions can be applied. 5 | 6 | In these tests, it is assumed that: 7 | 1) An XML attribute node is converted into 8 | the string representation of the attribute value. 9 | 2) An XML text node is converted into 10 | the string representation of the text node content. 11 | 12 | In the DOM API, such a string representation can 13 | be obtained by org.w3c.dom.Node#getNodeValue. 14 | 15 | In XACML 1.1, this assumption will be true. 16 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF004/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF004/Special.txt: -------------------------------------------------------------------------------- 1 | The XACML 1.0 specification does not explicitly 2 | define the way to convert each of the selected node set 3 | into a string representation so that the constructor 4 | functions can be applied. 5 | 6 | In these tests, it is assumed that: 7 | 1) An XML attribute node is converted into 8 | the string representation of the attribute value. 9 | 2) An XML text node is converted into 10 | the string representation of the text node content. 11 | 12 | In the DOM API, such a string representation can 13 | be obtained by org.w3c.dom.Node#getNodeValue. 14 | 15 | In XACML 1.1, this assumption will be true. 16 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF005/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Indeterminate 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF005/Special.txt: -------------------------------------------------------------------------------- 1 | The XACML 1.0 specification does not explicitly 2 | define the way to convert each of the selected node set 3 | into a string representation so that the constructor 4 | functions can be applied. 5 | 6 | In these tests, it is assumed that: 7 | 1) An XML attribute node is converted into 8 | the string representation of the attribute value. 9 | 2) An XML text node is converted into 10 | the string representation of the text node content. 11 | 12 | In the DOM API, such a string representation can 13 | be obtained by org.w3c.dom.Node#getNodeValue. 14 | 15 | In XACML 1.1, this assumption will be true. 16 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF006/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF006/Special.txt: -------------------------------------------------------------------------------- 1 | The XACML 1.0 specification does not explicitly 2 | define the way to convert each of the selected node set 3 | into a string representation so that the constructor 4 | functions can be applied. 5 | 6 | In these tests, it is assumed that: 7 | 1) An XML attribute node is converted into 8 | the string representation of the attribute value. 9 | 2) An XML text node is converted into 10 | the string representation of the text node content. 11 | 12 | In the DOM API, such a string representation can 13 | be obtained by org.w3c.dom.Node#getNodeValue. 14 | 15 | In XACML 1.1, this assumption will be true. 16 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF007/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIF007/Special.txt: -------------------------------------------------------------------------------- 1 | The XACML 1.0 specification does not explicitly 2 | define the way to convert each of the selected node set 3 | into a string representation so that the constructor 4 | functions can be applied. 5 | 6 | In these tests, it is assumed that: 7 | 1) An XML attribute node is converted into 8 | the string representation of the attribute value. 9 | 2) An XML text node is converted into 10 | the string representation of the text node content. 11 | 12 | In the DOM API, such a string representation can 13 | be obtained by org.w3c.dom.Node#getNodeValue. 14 | 15 | In XACML 1.1, this assumption will be true. 16 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIG001/Policy.xml: -------------------------------------------------------------------------------- 1 | 2 | 10 | 11 | Policy for Conformance Test IIIG001. 12 | Purpose - Non-mandatory Functions: Case: xpath-node-count 13 | 14 | 15 | 16 | http://www.w3.org/TR/1999/REC-xpath-19991116 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 29 | //* 30 | 31 | 32 | 18 33 | 34 | 35 | 36 | 37 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIG001/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Permit 8 | 9 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIG301/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Deny 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | 19 | 20 | 21 | urn:oasis:names:tc:xacml:2.0:conformance-test:IIIG301:policy2 22 | urn:oasis:names:tc:xacml:2.0:conformance-test:IIIG301:policy3 23 | urn:oasis:names:tc:xacml:2.0:conformance-test:IIIG301:policy4 24 | urn:oasis:names:tc:xacml:2.0:conformance-test:IIIG301:policyset 25 | 26 | 27 | 28 | 29 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/IIIG302/Response.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | Deny 8 | 9 | 11 | 12 | 13 | 15 | assignment1 18 | 19 | 20 | 21 | urn:oasis:names:tc:xacml:2.0:conformance-test:IIIG302:InteralPolicy3 22 | urn:oasis:names:tc:xacml:2.0:conformance-test:IIIG302:InternalPolicy4 23 | urn:oasis:names:tc:xacml:2.0:conformance-test:IIIG302:InternalPolicyset 24 | urn:oasis:names:tc:xacml:2.0:conformance-test:IIIG302:policyset 25 | 26 | 27 | 28 | 29 | -------------------------------------------------------------------------------- /src/test/resources/xacml+xml.samples/xacml-3.0-ct/optional/README.md: -------------------------------------------------------------------------------- 1 | This folder must contain only tests of optional (not mandatory) XACML 3.0 features, such as xpathExpression datatype or XPath-based functions, and XACML profiles. --------------------------------------------------------------------------------