xacml:ObligationExpressions

Element information

Content

• xacml:ObligationExpression [1..*]    

Attributes

None

Used in

• Type xacml:PolicySetType (Element xacml:PolicySet)
• Type xacml:PolicyType (Element xacml:Policy)
• Type xacml:RuleType (Element xacml:Rule)

Sample instance

<ObligationExpressions>
   <ObligationExpression ObligationId="urn:oasis:names:tc:xacml:example:obligation:email"
                         FulfillOn="Permit">
      <AttributeAssignmentExpression AttributeId="urn:oasis:names:tc:xacml:3.0:example:attribute:mailto">
         <AttributeSelector MustBePresent="true"
                            Category="urn:oasis:names:tc:xacml:3.0:attribute-category:resource"
                            Path="md:record/md:patient/md:patientContact/md:email"
                            DataType="http://www.w3.org/2001/XMLSchema#string"/>
      </AttributeAssignmentExpression>
      <AttributeAssignmentExpression AttributeId="urn:oasis:names:tc:xacml:3.0:example:attribute:text">
         <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">Your medical record has been accessed by:</AttributeValue>
      </AttributeAssignmentExpression>
      <AttributeAssignmentExpression AttributeId="urn:oasis:names:tc:xacml:3.0:example:attribute:text">
         <AttributeDesignator MustBePresent="false"
                              Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject"
                              AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id"
                              DataType="http://www.w3.org/2001/XMLSchema#string"/>
      </AttributeAssignmentExpression>
   </ObligationExpression>
</ObligationExpressions>