XACL Example

---

From: http://www.trl.ibm.co.jp/projects/xml/doccont/xacl_e.htm

Context:

A policy example. 

Conceptually, our XML document consists of two parts: contents and policy. Here is a simple
example of bid submission document. The policy written in XACL contains three rules: 

  1.Alice has read and write privilege on the contents element. 
  2.Bob has only read privilege on the contents element. 
  3.By default, other users have no privilege on the contents element. 

<document>

                              <contents id="contents">
                                <userInfo id="section1">
                                  <date>Oct. 8, 1999</date>
                                  <name>Kudo</date>
                                </userInfo>
                                <bidInfo id="section2">
                                  <price currency="USD">150</price>
                                  <brand name="VISA"/>
                                </bidInfo>
                              </contents>

                              <policy>
                              <xacl>
                                <object href="id(contents)"/>
                                <rule id="rule1">
                                  <acl>
                                    <subject><uid>Alice</uid></subject>
                                    <privilege type="read" sign="+"/>
                                    <privilege type="write" sign="+"/> 
                                  </acl>
                                </rule>
                                <rule id="rule2">
                                  <acl>
                                    <subject><uid>Bob</uid></subject>
                                    <privilege type="read" sign="+"/>
                                  </acl>
                                </rule>
                                <rule id="rule3">
                                  <acl>
                                    <subject></subject>
                                    <privilege type="read" sign="-"/>
                                    <privilege type="write" sign="-"/>
                                  </acl>
                                </rule>
                              </xacl>
                              </policy>

                              </document> 

---

Prepared by Robin Cover for The XML Cover Pages archive.

---