RE: [xacml] Groups - IPC WD-05 uploaded

<Policy xmlns="urn:oasis:names:tc:xacml:3.0:core:schema:wd-17" 
	PolicyId="copyright-approve" Version="1" 
	RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides">
  <Description>Example access control policy for copyright material</Description>
  <Target>
    <AnyOf>
      <AllOf>
	<Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
	  <AttributeValue 
	      DataType="http://www.w3.org/2001/XMLSchema#string">COPYRIGHT
	  </AttributeValue>
	  <AttributeDesignator 
	      Category="urn:oasis:names:tc:xacml:3.0:attribute-category:resource" 
	      AttributeId="urn:oasis:names:tc:xacml:3.0:profiles:ipc:ip-type" 
	      DataType="http://www.w3.org/2001/XMLSchema#string" 
	      MustBePresent="false"/>
	</Match>
      </AllOf>
    </AnyOf>
  </Target>
  <Rule RuleId="right to use copyrighted material match" Effect="Permit">
    <Description>
      allow if subject's association to the designated custodian of the 
      copyright agrees
    </Description>
    <Target>
      <AnyOf>
	<AllOf>
	  <Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
	    <AttributeValue 
		DataType="http://www.w3.org/2001/XMLSchema#string">Wiley Corp
	    </AttributeValue>
	    <AttributeDesignator 
		Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject"  
		AttributeId="Organizational-Affiliation" 
		DataType="http://www.w3.org/2001/XMLSchema#string" 
		MustBePresent="false"/>
	  </Match>
	  <Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
	    <AttributeValue 
		DataType="http://www.w3.org/2001/XMLSchema#string">CR101
	    </AttributeValue>
	    <AttributeDesignator 
		Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject"  
		AttributeId="Agreement-Designator" 
		DataType="http://www.w3.org/2001/XMLSchema#string" 
		MustBePresent="false"/>
	  </Match>
	  <Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
	    <AttributeValue
		DataType="http://www.w3.org/2001/XMLSchema#string">CR101
	    </AttributeValue>
	    <AttributeDesignator 
		Category="urn:oasis:names:tc:xacml:3.0:attribute-category:resource" 
		AttributeId="urn:oasis:names:tc:xacml:3.0:profiles:ipc:agreement-designator" 
		DataType="http://www.w3.org/2001/XMLSchema#string" 
		MustBePresent="false"/>  
	  </Match>
	  <Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
	    <AttributeValue 
		DataType="http://www.w3.org/2001/XMLSchema#string">Acme
	    </AttributeValue>
	    <AttributeDesignator 
		Category="urn:oasis:names:tc:xacml:3.0:attribute-category:resource"  
		AttributeId="urn:oasis:names:tc:xacml:3.0:profiles:ipc:ip-owner" 
		DataType="http://www.w3.org/2001/XMLSchema#string" 
		MustBePresent="false"/>
	  </Match>					                                                                             
	  <Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
	    <AttributeValue 
		DataType="http://www.w3.org/2001/XMLSchema#string">Wiley Corp
	    </AttributeValue>
	    <AttributeDesignator 
		Category="urn:oasis:names:tc:xacml:3.0:attribute-category:resource"  
		AttributeId="urn:oasis:names:tc:xacml:3.0:profiles:ipc:ip-designee" 
		DataType="http://www.w3.org/2001/XMLSchema#string" 
		MustBePresent="false"/>
	  </Match>
	</AllOf>
      </AnyOf>
    </Target>
    <Condition>
      <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and">
	<Apply 
	    FunctionId="urn:oasis:names:tc:xacml:1.0:function:date-greater-than-or-equal">
	  <Apply 
	      FunctionId="urn:oasis:names:tc:xacml:1.0:function:date-one-and-only">
	    <AttributeDesignator
		Category="urn:oasis:names:tc:xacml:3.0:attribute-category:environment"
		DataType="http://www.w3.org/2001/XMLSchema#date"
		AttributeId="urn:oasis:names:tc:xacml:1.0:environment:current-date"
		MustBePresent="false"/>
	  </Apply>
	  <Apply 
	      FunctionId="urn:oasis:names:tc:xacml:1.0:function:date-one-and-only">
	    <AttributeDesignator 
		Category="urn:oasis:names:tc:xacml:3.0:attribute-category:resource"  
		AttributeId="urn:oasis:names:tc:xacml:3.0:profiles:ipc:effective-date" 
		DataType="http://www.w3.org/2001/XMLSchema#date" 
		MustBePresent="false"/>
	  </Apply>
	</Apply>
	<Apply 
	    FunctionId="urn:oasis:names:tc:xacml:1.0:function:date-less-than-or-equal">
	  <Apply 
	      FunctionId="urn:oasis:names:tc:xacml:1.0:function:date-one-and-only">
	    <AttributeDesignator
		Category="urn:oasis:names:tc:xacml:3.0:attribute-category:environment"
		DataType="http://www.w3.org/2001/XMLSchema#date"
		AttributeId="urn:oasis:names:tc:xacml:1.0:environment:current-date"
		MustBePresent="false"/>
	  </Apply>
	  <Apply 
	      FunctionId="urn:oasis:names:tc:xacml:1.0:function:date-one-and-only">
	    <AttributeDesignator 
		Category="urn:oasis:names:tc:xacml:3.0:attribute-category:resource"  
		AttributeId="urn:oasis:names:tc:xacml:3.0:profiles:ipc:expiration-date" 
		DataType="http://www.w3.org/2001/XMLSchema#date" 
		MustBePresent="false"/>
	  </Apply>
	</Apply>
      </Apply>
    </Condition>
  </Rule>
  <ObligationExpressions>
    <ObligationExpression ObligationId="urn:oasis:names:tc:ipc:1.0:obligation:encrypt" 
			  FulfillOn="Permit"/>	    
    <ObligationExpression ObligationId="urn:oasis:names:tc:ipc:1.0:obligation:marking" 
			  FulfillOn="Permit">
      <AttributeAssignmentExpression  
	  AttributeId="urn:oasis:names:tc:xacml:2.0:example:attribute:text">
	<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">©2011  Acme</AttributeValue>
      </AttributeAssignmentExpression>
    </ObligationExpression>
  </ObligationExpressions>      
</Policy>