XACML 3.0 Identifiers 拿走不要客气

1 XACML namespaces
urn:oasis:names:tc:xacml:3.0:core:schema


2 Attribute categories


urn:oasis:names:tc:xacml:3.0:attribute-category:resource
urn:oasis:names:tc:xacml:3.0:attribute-category:action
urn:oasis:names:tc:xacml:3.0:attribute-category:environment


urn:oasis:names:tc:xacml:1.0:subject-category:access-subject
urn:oasis:names:tc:xacml:1.0:subject-category:recipient-subject
urn:oasis:names:tc:xacml:1.0:subject-category:intermediary-subject
urn:oasis:names:tc:xacml:1.0:subject-category:codebase
urn:oasis:names:tc:xacml:1.0:subject-category:requesting-machine


3 Data-types
urn:oasis:names:tc:xacml:1.0:data-type:x500Name.
urn:oasis:names:tc:xacml:1.0:data-type:rfc822Name
urn:oasis:names:tc:xacml:2.0:data-type:ipAddress
urn:oasis:names:tc:xacml:2.0:data-type:dnsName
urn:oasis:names:tc:xacml:3.0:data-type:xpathExpression
http://www.w3.org/2001/XMLSchema#string
http://www.w3.org/2001/XMLSchema#boolean
http://www.w3.org/2001/XMLSchema#integer
http://www.w3.org/2001/XMLSchema#double
http://www.w3.org/2001/XMLSchema#time
http://www.w3.org/2001/XMLSchema#date
http://www.w3.org/2001/XMLSchema#dateTime
http://www.w3.org/2001/XMLSchema#anyURI
http://www.w3.org/2001/XMLSchema#hexBinary
http://www.w3.org/2001/XMLSchema#base64Binary
http://www.w3.org/2001/XMLSchema#dayTimeDuration
http://www.w3.org/2001/XMLSchema#yearMonthDuration




4 Subject attributes
urn:oasis:names:tc:xacml:1.0:subject:subject-id
urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier
urn:oasis:names:tc:xacml:1.0:subject:key-info
urn:oasis:names:tc:xacml:1.0:subject:authentication-time
urn:oasis:names:tc:xacml:1.0:subject:authentication-method
urn:oasis:names:tc:xacml:1.0:subject:request-time
urn:oasis:names:tc:xacml:1.0:subject:session-start-time
urn:oasis:names:tc:xacml:3.0:subject:authn-locality:ip-address
urn:oasis:names:tc:xacml:3.0:subject:authn-locality:dns-name




5 Resource attributes
urn:oasis:names:tc:xacml:1.0:resource:resource-id
urn:oasis:names:tc:xacml:2.0:resource:target-namespace




6 Action attributes
urn:oasis:names:tc:xacml:3.0:attribute-category:action.
urn:oasis:names:tc:xacml:1.0:action:action-id
urn:oasis:names:tc:xacml:1.0:action:implied-action
urn:oasis:names:tc:xacml:1.0:action:action-namespace




7 Environment attributes
urn:oasis:names:tc:xacml:3.0:attribute-category:environment.
urn:oasis:names:tc:xacml:1.0:environment:current-time
urn:oasis:names:tc:xacml:1.0:environment:current-date
urn:oasis:names:tc:xacml:1.0:environment:current-dateTime


8 Status codes
urn:oasis:names:tc:xacml:1.0:status:ok
urn:oasis:names:tc:xacml:1.0:status:missing-attribute
urn:oasis:names:tc:xacml:1.0:status:syntax-error
urn:oasis:names:tc:xacml:1.0:status:processing-error


9 Combining algorithms
urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:deny-overrides
urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:permit-overrides
urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:first-applicable
urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:ordered-deny-overrides
urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:ordered-permit-overrides
urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:deny-unless-permit
urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:permit-unless-deny
urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides
urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides
urn:oasis:names:tc:xacml:1.1:rule-combining-algorithm:ordered-deny-overrides
urn:oasis:names:tc:xacml:1.1:rule-combining-algorithm:ordered-permit-overrides


urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:deny-overrides
urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:permit-overrides
urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:first-applicable
urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:only-one-applicable
urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:ordered-deny-overrides
urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:ordered-permit-overrides
urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:deny-unless-permit
urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:permit-unless-deny
urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides
urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:permit-overrides
urn:oasis:names:tc:xacml:1.1:policy-combining-algorithm:ordered-deny-overrides
urn:oasis:names:tc:xacml:1.1:policy-combining-algorithm:ordered-permit-overrides


10 Functions
10.1 Equality predicates
urn:oasis:names:tc:xacml:1.0:function:string-equal
urn:oasis:names:tc:xacml:3.0:function:string-equal-ignore-case
urn:oasis:names:tc:xacml:1.0:function:boolean-equal
urn:oasis:names:tc:xacml:1.0:function:integer-equal
urn:oasis:names:tc:xacml:1.0:function:double-equal
urn:oasis:names:tc:xacml:1.0:function:date-equal
urn:oasis:names:tc:xacml:1.0:function:time-equal
urn:oasis:names:tc:xacml:1.0:function:dateTime-equal
urn:oasis:names:tc:xacml:3.0:function:dayTimeDuration-equal
urn:oasis:names:tc:xacml:3.0:function:yearMonthDuration-equal
urn:oasis:names:tc:xacml:1.0:function:anyURI-equal
urn:oasis:names:tc:xacml:1.0:function:x500Name-equal
urn:oasis:names:tc:xacml:1.0:function:rfc822Name-equal
urn:oasis:names:tc:xacml:1.0:function:hexBinary-equal
urn:oasis:names:tc:xacml:1.0:function:base64Binary-equal




10.2 Arithmetic functions
urn:oasis:names:tc:xacml:1.0:function:integer-add
urn:oasis:names:tc:xacml:1.0:function:double-add
urn:oasis:names:tc:xacml:1.0:function:integer-subtract
urn:oasis:names:tc:xacml:1.0:function:double-subtract
urn:oasis:names:tc:xacml:1.0:function:integer-multiply
urn:oasis:names:tc:xacml:1.0:function:double-multiply
urn:oasis:names:tc:xacml:1.0:function:integer-divide
urn:oasis:names:tc:xacml:1.0:function:double-divide
urn:oasis:names:tc:xacml:1.0:function:integer-mod
urn:oasis:names:tc:xacml:1.0:function:integer-abs
urn:oasis:names:tc:xacml:1.0:function:double-abs
urn:oasis:names:tc:xacml:1.0:function:round
urn:oasis:names:tc:xacml:1.0:function:floor






10.3 String conversion functions
urn:oasis:names:tc:xacml:1.0:function:string-normalize-space
urn:oasis:names:tc:xacml:1.0:function:string-normalize-to-lower-case




10.4 Numeric data-type conversion functions
urn:oasis:names:tc:xacml:1.0:function:double-to-integer
urn:oasis:names:tc:xacml:1.0:function:integer-to-double




10.5 Logical functions
urn:oasis:names:tc:xacml:1.0:function:or
urn:oasis:names:tc:xacml:1.0:function:and
urn:oasis:names:tc:xacml:1.0:function:n-of
urn:oasis:names:tc:xacml:1.0:function:not




10.6 Numeric comparison functions
urn:oasis:names:tc:xacml:1.0:function:integer-greater-than
urn:oasis:names:tc:xacml:1.0:function:integer-greater-than-or-equal
urn:oasis:names:tc:xacml:1.0:function:integer-less-than
urn:oasis:names:tc:xacml:1.0:function:integer-less-than-or-equal
urn:oasis:names:tc:xacml:1.0:function:double-greater-than
urn:oasis:names:tc:xacml:1.0:function:double-greater-than-or-equal
urn:oasis:names:tc:xacml:1.0:function:double-less-than
urn:oasis:names:tc:xacml:1.0:function:double-less-than-or-equal




10.7 Date and time arithmetic functions
urn:oasis:names:tc:xacml:3.0:function:dateTime-add-dayTimeDuration
urn:oasis:names:tc:xacml:3.0:function:dateTime-add-yearMonthDuration
urn:oasis:names:tc:xacml:3.0:function:dateTime-subtract-dayTimeDuration
urn:oasis:names:tc:xacml:3.0:function:dateTime-subtract-yearMonthDuration
urn:oasis:names:tc:xacml:3.0:function:date-add-yearMonthDuration
urn:oasis:names:tc:xacml:3.0:function:date-subtract-yearMonthDuration


10.8 Non-numeric comparison functions
urn:oasis:names:tc:xacml:1.0:function:string-greater-than
urn:oasis:names:tc:xacml:1.0:function:string-greater-than-or-equal
urn:oasis:names:tc:xacml:1.0:function:string-less-than
urn:oasis:names:tc:xacml:1.0:function:string-less-than-or-equal
urn:oasis:names:tc:xacml:1.0:function:time-greater-than
urn:oasis:names:tc:xacml:1.0:function:time-greater-than-or-equal
urn:oasis:names:tc:xacml:1.0:function:time-less-than
urn:oasis:names:tc:xacml:1.0:function:time-less-than-or-equal
urn:oasis:names:tc:xacml:2.0:function:time-in-range
urn:oasis:names:tc:xacml:1.0:function:dateTime-greater-than
urn:oasis:names:tc:xacml:1.0:function:dateTime-greater-than-or-equal
urn:oasis:names:tc:xacml:1.0:function:dateTime-less-than
urn:oasis:names:tc:xacml:1.0:function:dateTime-less-than-or-equal
urn:oasis:names:tc:xacml:1.0:function:date-greater-than
urn:oasis:names:tc:xacml:1.0:function:date-greater-than-or-equal
urn:oasis:names:tc:xacml:1.0:function:date-less-than
urn:oasis:names:tc:xacml:1.0:function:date-less-than-or-equal


10.9 String functions
urn:oasis:names:tc:xacml:2.0:function:string-concatenate
urn:oasis:names:tc:xacml:3.0:function:boolean-from-string
urn:oasis:names:tc:xacml:3.0:function:string-from-boolean
urn:oasis:names:tc:xacml:3.0:function:integer-from-string
urn:oasis:names:tc:xacml:3.0:function:string-from-integer
urn:oasis:names:tc:xacml:3.0:function:double-from-string
urn:oasis:names:tc:xacml:3.0:function:string-from-double
urn:oasis:names:tc:xacml:3.0:function:time-from-string
urn:oasis:names:tc:xacml:3.0:function:string-from-time
urn:oasis:names:tc:xacml:3.0:function:date-from-string
urn:oasis:names:tc:xacml:3.0:function:string-from-date
urn:oasis:names:tc:xacml:3.0:function:dateTime-from-string
urn:oasis:names:tc:xacml:3.0:function:string-from-dateTime
urn:oasis:names:tc:xacml:3.0:function:anyURI-from-string
urn:oasis:names:tc:xacml:3.0:function:string-from-anyURI
urn:oasis:names:tc:xacml:3.0:function:dayTimeDuration-from-string
urn:oasis:names:tc:xacml:3.0:function:string-from-dayTimeDuration
urn:oasis:names:tc:xacml:3.0:function:yearMonthDuration-from-string
urn:oasis:names:tc:xacml:3.0:function:string-from-yearMonthDuration
urn:oasis:names:tc:xacml:3.0:function:x500Name-from-string
urn:oasis:names:tc:xacml:3.0:function:string-from-x500Name
urn:oasis:names:tc:xacml:3.0:function:string-from-rfc822Name
urn:oasis:names:tc:xacml:3.0:function:ipAddress-from-string
urn:oasis:names:tc:xacml:3.0:function:string-from-ipAddress
urn:oasis:names:tc:xacml:3.0:function:dnsName-from-string
urn:oasis:names:tc:xacml:3.0:function:string-from-dnsName
urn:oasis:names:tc:xacml:3.0:function:string-starts-with
urn:oasis:names:tc:xacml:3.0:function:anyURI-starts-with
urn:oasis:names:tc:xacml:3.0:function:string-ends-with
urn:oasis:names:tc:xacml:3.0:function:anyURI-ends-with
urn:oasis:names:tc:xacml:3.0:function:string-contains
urn:oasis:names:tc:xacml:3.0:function:anyURI-contains
urn:oasis:names:tc:xacml:3.0:function:string-substring
urn:oasis:names:tc:xacml:3.0:function:anyURI-substring


10.10 Bag functions
urn:oasis:names:tc:xacml:x.x:function:type-one-and-only
urn:oasis:names:tc:xacml:x.x:function:type-bag-size
urn:oasis:names:tc:xacml:x.x:function:type-is-in
urn:oasis:names:tc:xacml:x.x:function:type-bag


10.11 Set functions
urn:oasis:names:tc:xacml:x.x:function:type-intersection
urn:oasis:names:tc:xacml:x.x:function:type-at-least-one-member-of
urn:oasis:names:tc:xacml:x.x:function:type-union
urn:oasis:names:tc:xacml:x.x:function:type-subset
urn:oasis:names:tc:xacml:x.x:function:type-set-equals


10.12 Higher-order bag functions
urn:oasis:names:tc:xacml:3.0:function:any-of
urn:oasis:names:tc:xacml:3.0:function:all-of
urn:oasis:names:tc:xacml:3.0:function:any-of-any
urn:oasis:names:tc:xacml:1.0:function:all-of-any
urn:oasis:names:tc:xacml:1.0:function:any-of-all
urn:oasis:names:tc:xacml:1.0:function:all-of-all
urn:oasis:names:tc:xacml:3.0:function:map


10.13 Regular-expression-based functions
urn:oasis:names:tc:xacml:1.0:function:string-regexp-match
urn:oasis:names:tc:xacml:2.0:function:anyURI-regexp-match
urn:oasis:names:tc:xacml:2.0:function:ipAddress-regexp-match
urn:oasis:names:tc:xacml:2.0:function:dnsName-regexp-match
urn:oasis:names:tc:xacml:2.0:function:rfc822Name-regexp-match
urn:oasis:names:tc:xacml:2.0:function:x500Name-regexp-match


10.14 Special match functions
urn:oasis:names:tc:xacml:1.0:function:x500Name-match
urn:oasis:names:tc:xacml:1.0:function:rfc822Name-match


10.15 XPath-based functions
urn:oasis:names:tc:xacml:3.0:function:xpath-node-count
urn:oasis:names:tc:xacml:3.0:function:xpath-node-equal
urn:oasis:names:tc:xacml:3.0:function:xpath-node-match


10.16 Other functions
urn:oasis:names:tc:xacml:3.0:function:access-permitted