Exclude specific EntityID from attribute-match policy requirement rule?
Purcell, Brian K
purcell at uthscsa.edu
Tue Feb 15 14:01:56 UTC 2022
> Or just AND it into the policy rule. It's more or less prefix notation, just with XML so more verbose.
> (AND (something, NOT(something else))
> <PolicyRequirementRule xsi:type="AND">
> <Rule...>
> <Rule xsi:type="NOT">
> <Rule ...>
> </Rule>
> </PolicyRequirementRule>
> You should just setup a separate filter rule to DENY those
> attributes to that EntityID. Deny rules always trump Allow rules.
Thanks everyone for those suggestions. I will tinker with those today and see what I like best.
--Brian
More information about the users
mailing list