source: TI12-security/trunk/NDGSecurity/python/ndg_security_test/ndg/security/test/unit/wsgi/saml/policy-1.1.xml @ 6623

<?xml version="1.0" encoding="UTF-8"?>
<Policy PolicyId="Authorization Service Units Tests" xmlns="urn:ndg:security:authz:1.2:policy">
    <Description>Restrict access for Authorization integration tests</Description>
    
    <Target>
        <URIPattern>^http://localhost/dap/data/.*</URIPattern>
        <Attributes>
            <Attribute>
                <Name>urn:siteA:security:authz:1.0:attr:staff</Name>
                <AttributeAuthorityURI>https://localhost:5443/AttributeAuthority/saml</AttributeAuthorityURI>
            </Attribute>
        </Attributes> 
        <Actions>
            <Action>
                
            </Action>
        </Actions>
    </Target>
    <Target>
        <URIPattern>^http://localhost/dap/data/test_accessDeniedToSecuredURI$</URIPattern>
        <Attributes>
            <Attribute>
                <Name>urn:siteA:security:authz:1.0:attr:forbidden</Name>
                <AttributeAuthorityURI>https://localhost:5443/AttributeAuthority/saml</AttributeAuthorityURI>
            </Attribute>
            <Attribute>
                <Name>urn:siteA:security:authz:1.0:attr:keepout</Name>
                <AttributeAuthorityURI>https://localhost:5443/AttributeAuthority/saml</AttributeAuthorityURI>
            </Attribute>
        </Attributes>
    </Target>
    <!-- Test inclusion of ampersand -->
    <Target>
        <URIPattern>^/test_securedURI[?&amp;]MyQueryParam=100</URIPattern>
        <Attributes>
            <Attribute>
                <Name>urn:siteA:security:authz:1.0:attr:staff</Name>
                <AttributeAuthorityURI>https://localhost:5443/AttributeAuthority/saml</AttributeAuthorityURI>
            </Attribute>
        </Attributes>        
    </Target>
</Policy>