XACML 3.0 Identifiers 拿走不要客气

1 XACML namespaces

urn:oasis:names:tc:xacml:3.0:core:schema

2 Attribute categories

urn:oasis:names:tc:xacml:3.0:attribute-category:resource

urn:oasis:names:tc:xacml:3.0:attribute-category:action

urn:oasis:names:tc:xacml:3.0:attribute-category:environment

urn:oasis:names:tc:xacml:1.0:subject-category:access-subject

urn:oasis:names:tc:xacml:1.0:subject-category:recipient-subject

urn:oasis:names:tc:xacml:1.0:subject-category:intermediary-subject

urn:oasis:names:tc:xacml:1.0:subject-category:codebase

urn:oasis:names:tc:xacml:1.0:subject-category:requesting-machine

3 Data-types

urn:oasis:names:tc:xacml:1.0:data-type:x500Name.

urn:oasis:names:tc:xacml:1.0:data-type:rfc822Name

urn:oasis:names:tc:xacml:2.0:data-type:ipAddress

urn:oasis:names:tc:xacml:2.0:data-type:dnsName

urn:oasis:names:tc:xacml:3.0:data-type:xpathExpression
http://www.w3.org/2001/XMLSchema#string http://www.w3.org/2001/XMLSchema#boolean http://www.w3.org/2001/XMLSchema#integer http://www.w3.org/2001/XMLSchema#double http://www.w3.org/2001/XMLSchema#time http://www.w3.org/2001/XMLSchema#date http://www.w3.org/2001/XMLSchema#dateTime http://www.w3.org/2001/XMLSchema#anyURI http://www.w3.org/2001/XMLSchema#hexBinary http://www.w3.org/2001/XMLSchema#base64Binary http://www.w3.org/2001/XMLSchema#dayTimeDuration http://www.w3.org/2001/XMLSchema#yearMonthDuration
4 Subject attributes

urn:oasis:names:tc:xacml:1.0:subject:subject-id

urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier

urn:oasis:names:tc:xacml:1.0:subject:key-info

urn:oasis:names:tc:xacml:1.0:subject:authentication-time

urn:oasis:names:tc:xacml:1.0:subject:authentication-method

urn:oasis:names:tc:xacml:1.0:subject:request-time

urn:oasis:names:tc:xacml:1.0:subject:session-start-time

urn:oasis:names:tc:xacml:3.0:subject:authn-locality:ip-address

urn:oasis:names:tc:xacml:3.0:subject:authn-locality:dns-name

5 Resource attributes

urn:oasis:names:tc:xacml:1.0:resource:resource-id

urn:oasis:names:tc:xacml:2.0:resource:target-namespace

6 Action attributes

urn:oasis:names:tc:xacml:3.0:attribute-category:action.

urn:oasis:names:tc:xacml:1.0:action:action-id

urn:oasis:names:tc:xacml:1.0:action:implied-action

urn:oasis:names:tc:xacml:1.0:action:action-namespace

7 Environment attributes

urn:oasis:names:tc:xacml:3.0:attribute-category:environment.

urn:oasis:names:tc:xacml:1.0:environment:current-time

urn:oasis:names:tc:xacml:1.0:environment:current-date

urn:oasis:names:tc:xacml:1.0:environment:current-dateTime

8 Status codes

urn:oasis:names:tc:xacml:1.0:status:ok

urn:oasis:names:tc:xacml:1.0:status:missing-attribute

urn:oasis:names:tc:xacml:1.0:status:syntax-error

urn:oasis:names:tc:xacml:1.0:status:processing-error

9 Combining algorithms

urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:deny-overrides

urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:permit-overrides

urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:first-applicable

urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:ordered-deny-overrides

urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:ordered-permit-overrides

urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:deny-unless-permit

urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:permit-unless-deny

urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides

urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides

urn:oasis:names:tc:xacml:1.1:rule-combining-algorithm:ordered-deny-overrides

urn:oasis:names:tc:xacml:1.1:rule-combining-algorithm:ordered-permit-overrides

urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:deny-overrides

urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:permit-overrides

urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:first-applicable

urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:only-one-applicable

urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:ordered-deny-overrides

urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:ordered-permit-overrides

urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:deny-unless-permit

urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:permit-unless-deny

urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides

urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:permit-overrides

urn:oasis:names:tc:xacml:1.1:policy-combining-algorithm:ordered-deny-overrides

urn:oasis:names:tc:xacml:1.1:policy-combining-algorithm:ordered-permit-overrides

10 Functions

10.1 Equality predicates

urn:oasis:names:tc:xacml:1.0:function:string-equal

urn:oasis:names:tc:xacml:3.0:function:string-equal-ignore-case

urn:oasis:names:tc:xacml:1.0:function:boolean-equal

urn:oasis:names:tc:xacml:1.0:function:integer-equal

urn:oasis:names:tc:xacml:1.0:function:double-equal

urn:oasis:names:tc:xacml:1.0:function:date-equal

urn:oasis:names:tc:xacml:1.0:function:time-equal

urn:oasis:names:tc:xacml:1.0:function:dateTime-equal

urn:oasis:names:tc:xacml:3.0:function:dayTimeDuration-equal

urn:oasis:names:tc:xacml:3.0:function:yearMonthDuration-equal

urn:oasis:names:tc:xacml:1.0:function:anyURI-equal

urn:oasis:names:tc:xacml:1.0:function:x500Name-equal

urn:oasis:names:tc:xacml:1.0:function:rfc822Name-equal

urn:oasis:names:tc:xacml:1.0:function:hexBinary-equal

urn:oasis:names:tc:xacml:1.0:function:base64Binary-equal

10.2 Arithmetic functions

urn:oasis:names:tc:xacml:1.0:function:integer-add

urn:oasis:names:tc:xacml:1.0:function:double-add

urn:oasis:names:tc:xacml:1.0:function:integer-subtract

urn:oasis:names:tc:xacml:1.0:function:double-subtract

urn:oasis:names:tc:xacml:1.0:function:integer-multiply

urn:oasis:names:tc:xacml:1.0:function:double-multiply

urn:oasis:names:tc:xacml:1.0:function:integer-divide

urn:oasis:names:tc:xacml:1.0:function:double-divide

urn:oasis:names:tc:xacml:1.0:function:integer-mod

urn:oasis:names:tc:xacml:1.0:function:integer-abs

urn:oasis:names:tc:xacml:1.0:function:double-abs

urn:oasis:names:tc:xacml:1.0:function:round

urn:oasis:names:tc:xacml:1.0:function:floor

10.3 String conversion functions

urn:oasis:names:tc:xacml:1.0:function:string-normalize-space

urn:oasis:names:tc:xacml:1.0:function:string-normalize-to-lower-case

10.4 Numeric data-type conversion functions

urn:oasis:names:tc:xacml:1.0:function:double-to-integer

urn:oasis:names:tc:xacml:1.0:function:integer-to-double

10.5 Logical functions

urn:oasis:names:tc:xacml:1.0:function:or

urn:oasis:names:tc:xacml:1.0:function:and

urn:oasis:names:tc:xacml:1.0:function:n-of

urn:oasis:names:tc:xacml:1.0:function:not

10.6 Numeric comparison functions

urn:oasis:names:tc:xacml:1.0:function:integer-greater-than

urn:oasis:names:tc:xacml:1.0:function:integer-greater-than-or-equal

urn:oasis:names:tc:xacml:1.0:function:integer-less-than

urn:oasis:names:tc:xacml:1.0:function:integer-less-than-or-equal

urn:oasis:names:tc:xacml:1.0:function:double-greater-than

urn:oasis:names:tc:xacml:1.0:function:double-greater-than-or-equal

urn:oasis:names:tc:xacml:1.0:function:double-less-than

urn:oasis:names:tc:xacml:1.0:function:double-less-than-or-equal

10.7 Date and time arithmetic functions

urn:oasis:names:tc:xacml:3.0:function:dateTime-add-dayTimeDuration

urn:oasis:names:tc:xacml:3.0:function:dateTime-add-yearMonthDuration

urn:oasis:names:tc:xacml:3.0:function:dateTime-subtract-dayTimeDuration

urn:oasis:names:tc:xacml:3.0:function:dateTime-subtract-yearMonthDuration

urn:oasis:names:tc:xacml:3.0:function:date-add-yearMonthDuration

urn:oasis:names:tc:xacml:3.0:function:date-subtract-yearMonthDuration

10.8 Non-numeric comparison functions

urn:oasis:names:tc:xacml:1.0:function:string-greater-than

urn:oasis:names:tc:xacml:1.0:function:string-greater-than-or-equal

urn:oasis:names:tc:xacml:1.0:function:string-less-than

urn:oasis:names:tc:xacml:1.0:function:string-less-than-or-equal

urn:oasis:names:tc:xacml:1.0:function:time-greater-than

urn:oasis:names:tc:xacml:1.0:function:time-greater-than-or-equal

urn:oasis:names:tc:xacml:1.0:function:time-less-than

urn:oasis:names:tc:xacml:1.0:function:time-less-than-or-equal

urn:oasis:names:tc:xacml:2.0:function:time-in-range

urn:oasis:names:tc:xacml:1.0:function:dateTime-greater-than

urn:oasis:names:tc:xacml:1.0:function:dateTime-greater-than-or-equal

urn:oasis:names:tc:xacml:1.0:function:dateTime-less-than

urn:oasis:names:tc:xacml:1.0:function:dateTime-less-than-or-equal

urn:oasis:names:tc:xacml:1.0:function:date-greater-than

urn:oasis:names:tc:xacml:1.0:function:date-greater-than-or-equal

urn:oasis:names:tc:xacml:1.0:function:date-less-than

urn:oasis:names:tc:xacml:1.0:function:date-less-than-or-equal

10.9 String functions

urn:oasis:names:tc:xacml:2.0:function:string-concatenate

urn:oasis:names:tc:xacml:3.0:function:boolean-from-string

urn:oasis:names:tc:xacml:3.0:function:string-from-boolean

urn:oasis:names:tc:xacml:3.0:function:integer-from-string

urn:oasis:names:tc:xacml:3.0:function:string-from-integer

urn:oasis:names:tc:xacml:3.0:function:double-from-string

urn:oasis:names:tc:xacml:3.0:function:string-from-double

urn:oasis:names:tc:xacml:3.0:function:time-from-string

urn:oasis:names:tc:xacml:3.0:function:string-from-time

urn:oasis:names:tc:xacml:3.0:function:date-from-string

urn:oasis:names:tc:xacml:3.0:function:string-from-date

urn:oasis:names:tc:xacml:3.0:function:dateTime-from-string

urn:oasis:names:tc:xacml:3.0:function:string-from-dateTime

urn:oasis:names:tc:xacml:3.0:function:anyURI-from-string

urn:oasis:names:tc:xacml:3.0:function:string-from-anyURI

urn:oasis:names:tc:xacml:3.0:function:dayTimeDuration-from-string

urn:oasis:names:tc:xacml:3.0:function:string-from-dayTimeDuration

urn:oasis:names:tc:xacml:3.0:function:yearMonthDuration-from-string

urn:oasis:names:tc:xacml:3.0:function:string-from-yearMonthDuration

urn:oasis:names:tc:xacml:3.0:function:x500Name-from-string

urn:oasis:names:tc:xacml:3.0:function:string-from-x500Name

urn:oasis:names:tc:xacml:3.0:function:string-from-rfc822Name

urn:oasis:names:tc:xacml:3.0:function:ipAddress-from-string

urn:oasis:names:tc:xacml:3.0:function:string-from-ipAddress

urn:oasis:names:tc:xacml:3.0:function:dnsName-from-string

urn:oasis:names:tc:xacml:3.0:function:string-from-dnsName

urn:oasis:names:tc:xacml:3.0:function:string-starts-with

urn:oasis:names:tc:xacml:3.0:function:anyURI-starts-with

urn:oasis:names:tc:xacml:3.0:function:string-ends-with

urn:oasis:names:tc:xacml:3.0:function:anyURI-ends-with

urn:oasis:names:tc:xacml:3.0:function:string-contains

urn:oasis:names:tc:xacml:3.0:function:anyURI-contains

urn:oasis:names:tc:xacml:3.0:function:string-substring

urn:oasis:names:tc:xacml:3.0:function:anyURI-substring

10.10 Bag functions

urn:oasis:names:tc:xacml:x.x:function:type-one-and-only

urn:oasis:names:tc:xacml:x.x:function:type-bag-size

urn:oasis:names:tc:xacml:x.x:function:type-is-in

urn:oasis:names:tc:xacml:x.x:function:type-bag

10.11 Set functions

urn:oasis:names:tc:xacml:x.x:function:type-intersection

urn:oasis:names:tc:xacml:x.x:function:type-at-least-one-member-of

urn:oasis:names:tc:xacml:x.x:function:type-union

urn:oasis:names:tc:xacml:x.x:function:type-subset

urn:oasis:names:tc:xacml:x.x:function:type-set-equals

10.12 Higher-order bag functions

urn:oasis:names:tc:xacml:3.0:function:any-of

urn:oasis:names:tc:xacml:3.0:function:all-of

urn:oasis:names:tc:xacml:3.0:function:any-of-any

urn:oasis:names:tc:xacml:1.0:function:all-of-any

urn:oasis:names:tc:xacml:1.0:function:any-of-all

urn:oasis:names:tc:xacml:1.0:function:all-of-all

urn:oasis:names:tc:xacml:3.0:function:map

10.13 Regular-expression-based functions

urn:oasis:names:tc:xacml:1.0:function:string-regexp-match

urn:oasis:names:tc:xacml:2.0:function:anyURI-regexp-match

urn:oasis:names:tc:xacml:2.0:function:ipAddress-regexp-match

urn:oasis:names:tc:xacml:2.0:function:dnsName-regexp-match

urn:oasis:names:tc:xacml:2.0:function:rfc822Name-regexp-match

urn:oasis:names:tc:xacml:2.0:function:x500Name-regexp-match

10.14 Special match functions

urn:oasis:names:tc:xacml:1.0:function:x500Name-match

urn:oasis:names:tc:xacml:1.0:function:rfc822Name-match

10.15 XPath-based functions

urn:oasis:names:tc:xacml:3.0:function:xpath-node-count

urn:oasis:names:tc:xacml:3.0:function:xpath-node-equal

urn:oasis:names:tc:xacml:3.0:function:xpath-node-match

10.16 Other functions

urn:oasis:names:tc:xacml:3.0:function:access-permitted