Expressions

Description

The Expression signifies that an element that extends the ExpressionType and is a member of the Expression substitution group shall appear in its place. The Expression is not used directly in a policy. 

Custom attributes

Expresion Types

• Attribute value
• Resource
• Subject
• Action
• Environment
• Attribute selector
• Variable
• Function
• Function name

 

 

 

 

 

Attribute value

• Value
• Data type

Resource

• Attribute designator
  • Url
  • Soffid object
  • Account name
  • System name
  • Login name
  • Vault folder
  • Access level
• Data type

Subject

• Attribute designator
• Data type

Action

• Attribute designator
  • Method
• Data type

Environment

• Attribute designator
• Data type

Attribute selector

• Attribute selector
• Data type

Variable

• Variable

Function

• Function type
• Function
• Data type

Function name

• Function type
• Function
• Data type

 

---

https://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-core-spec-os.pdf