Exclude specific EntityID from attribute-match policy requirement rule?

Purcell, Brian K purcell at uthscsa.edu
Tue Feb 15 14:01:56 UTC 2022


> Or just AND it into the policy rule. It's more or less prefix notation, just with XML so more verbose.

> (AND (something, NOT(something else))

> <PolicyRequirementRule xsi:type="AND">
>        <Rule...>
>        <Rule xsi:type="NOT">
>                <Rule ...>
>        </Rule>
> </PolicyRequirementRule>

>    You should just setup a separate filter rule to DENY those 
> attributes to that EntityID. Deny rules always trump Allow rules.

Thanks everyone for those suggestions.  I will tinker with those today and see what I like best.

--Brian



More information about the users mailing list