From f33786014422754eae8f07dd466d1d74ad7f7e4e Mon Sep 17 00:00:00 2001
From: Radovan Semancik <radovan.semancik@evolveum.com>
Date: Thu, 3 Nov 2016 18:15:05 +0100
Subject: [PATCH] Moving global policy rules to top level (schema)

---
 .../xml/ns/public/common/common-core-3.xsd    | 26 +++++++++++--------
 1 file changed, 15 insertions(+), 11 deletions(-)

diff --git a/infra/schema/src/main/resources/xml/ns/public/common/common-core-3.xsd b/infra/schema/src/main/resources/xml/ns/public/common/common-core-3.xsd
index c72018c5391..989b5af0ea5 100644
--- a/infra/schema/src/main/resources/xml/ns/public/common/common-core-3.xsd
+++ b/infra/schema/src/main/resources/xml/ns/public/common/common-core-3.xsd
@@ -9630,6 +9630,18 @@
                             </xsd:documentation>
                         </xsd:annotation>
                     </xsd:element>
+                    
+                    <xsd:element name="globalPolicyRule" type="tns:PolicyRuleType" minOccurs="0" maxOccurs="unbounded">
+					    <xsd:annotation>
+					        <xsd:documentation>
+					            Global policy rules that are applied to all (selected) objects in the system.
+					            These rules specify compliance and governance constraints.
+					        </xsd:documentation>
+					        <xsd:appinfo>
+								<a:since>3.5</a:since>
+							</xsd:appinfo>
+					    </xsd:annotation>
+					</xsd:element>
 
                     <xsd:element name="profilingConfiguration" type="tns:ProfilingConfigurationType" minOccurs="0" maxOccurs="1">
                         <xsd:annotation>
@@ -10472,23 +10484,15 @@
 			    </xsd:annotation>
 			</xsd:element>
 			<!-- TODO: role assignment mode: multiple, single, parametric-multiple -->
-			<xsd:element name="globalPolicyRule" type="tns:PolicyRuleType" minOccurs="0" maxOccurs="unbounded">
-			    <xsd:annotation>
-			        <xsd:documentation>
-			            Reference to the root object of the role catalog.
-			        </xsd:documentation>
-			        <xsd:appinfo>
-						<a:since>3.5</a:since>
-					</xsd:appinfo>
-			    </xsd:annotation>
-			</xsd:element>
         </xsd:sequence>
     </xsd:complexType>
     
     <xsd:complexType name="PolicyRuleType">
         <xsd:annotation>
             <xsd:documentation>
-                TODO
+                These rules specify compliance and governance constraints.
+                E.g. role exclusion (SoD), number of assignees, 
+                approvals, remediation, etc.
             </xsd:documentation>
             <xsd:appinfo>
 				<a:since>3.5</a:since>