IdPFilterRequirementScript always returns true

[Peter Schober]

* Sara Hopkins <sara.hopkins at ed.ac.uk> [2012-02-29 14:24]:
> OK, thanks, so it's looking as if the example code is wrong
> then. What I want to do is to check an LDAP attribute and use its
> value to determine which attributes (if any) should be released to
> the SP. The idea is to apply access restrictions at the IdP end to
> particular sets of resources for particular groups of students. Am I
> missing some better way of doing this, perhaps?

Well, in the general sense of the question there's a
basic:AttributeValueString type rule, e.g.

<basic:Rule xsi:type="basic:AttributeValueString" attributeID="fooUniGroup" value="some:id:for:a:group" />

The the containing PolicyRequirementRule would become active if the
attribute "fooUniGroup" had the value of "some:id:for:a:group".
No scripting involved,
-peter