Policy Examples

DISCLAIMER: This page is for posting links to publicly available XACML policy examples. These are listed here solely for the information of parties interested in XACML. By including these links, neither the XACML TC, nor OASIS itself, is endorsing, recommending, or guaranteeing the accuracy of the referenced examples in any way. Except for those examples located in the OASIS document repository, the IPR status of these examples is unknown; the user is responsible for determining the conditions for use. This list may be modified at any time as further information about these or other examples becomes known. Additional submissions for listings and corrections are invited by the editor (Anne.Anderson@sun.com).

http://www.devshed.com/c/a/Security/Trust-Access-Control-and-Rights-for-Web-Services-Part-2/5/a (web page) simple example to illustrate implementation of an XACML Policy. The Target says that the Policy applies only to requests for the server called "SampleServer". The Policy has a Rule with a Target that requires an action of "login" and a Condition that applies only if the Subject is trying to log in between 9 a.m. and 5 p.m.

http://www.ppgia.pucpr.br/pesquisa/sisdist/papers/2004-ict-toktar-jamhour-maziero.pdf (pdf file) Figure 6 contains an RSVP policy in XACML

http://docs.oasis-open.org/xacml/2.0/XACML-2.0-OS-ALL.zip (zip file) This is the package of XACML 2.0 documents. It includes the example policies from the core specification as separate files.

http://www.site.uottawa.ca/~luigi/theses/XJin_Thesis.pdf (pdf file) See Table 3

http://infnforge.cnaf.infn.it/docman/view.php/5/40/sample-PBOX_policy_3.xml (xml file)

http://xml.coverpages.org/TMP-ProtocolV10.pdf (pdf file) See Section 8.5.4

http://book.itzero.com/read/others/Sams.Securing.Web.Services.with.WS-Security.May.2004.eBook-DDU_html/0672326515/ch09lev1sec3.html (web page) Listing 9.11 contains SamplePolicy on SampleServer for Login Only Between 9 and 5

http://www.oasis-open.org/committees/download.php/6076/ConformanceTests.zip (zip file) The XACML Conformance Tests for XACML 1.0 and 1.1 contain numerous trivial example policies.

PolicyExamples (last edited 2009-08-12 18:06:42 by localhost)