-
Notifications
You must be signed in to change notification settings - Fork 25
/
ConformanceTests.html
2959 lines (2782 loc) · 191 KB
/
ConformanceTests.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
<html>
<head>
<title>XACML Version 3.0 Conformance Tests (draft)</title>
</head>
<body>
<h1>XACML Version 3.0 Conformance Tests (draft)</h1>
<listing>
Version: 0.5, January 2014
Contributors: Anne Anderson, Satoshi Hada, John Merrells, Jin Peng, Seth Proctor, Argyn Kuketayev, Glenn Griffin
</listing>
This document describes and provides links to a suite of tests
intended to aid implementers in conforming to the <a
href="http://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-os-en.doc">
eXtensible Access Control Markup Language (XACML) Version 3.0 OASIS Standard</a>.
<h2>Contents</h2>
<ol TYPE=I>
<li><a href="#Description of tests"> Description of Tests
</a>
<ol TYPE=A>
<li><a href="#Test Case Groupings">Test Case Groupings</a>
<li><a href="#How to Use the Tests">How to Use the Tests</a>
<li><a href="#Preparing Tests for Execution">Preparing
Tests for Execution</a>
<li><a href="#Contributions of New Tests">Contributions
of New Tests</a>
<li><a href="#Bugs in the Tests">Bugs in the Tests</a>
</ol>
<li><a href="#Mandatory-to-Implement Functionality Tests">
Mandatory-to-Implement Functionality Tests </a>
<ol TYPE=A>
<li><a href="#Attribute References"> Attribute References </a>
<li><a href="#Target Matching"> Target Matching </a>
<li><a href="#Function Evaluation"> Function Evaluation </a>
<li><a href="#Combining Algorithms"> Combining Algorithms </a>
<li><a href="#Schema components"> Schema components </a>
<li><a href="#Release 3.0 Features"> Release 3.0 Features </a>
</ol>
<li><a href="#Optional, but Normative Functionality Tests">
Optional, but Normative Functionality Tests </a>
<ol TYPE=A>
<li><a href="#Obligations"> Obligations </a>
<li><a href="#DefaultsType"> DefaultsType </a>
<li><a href="#Hierarchical Resources"> Hierarchical Resources </a>
<li><a href="#<ResourceContent> Element"> <ResourceContent> Element </a>
<li><a href="#Multiple Decisions"> Multiple Decisions </a>
<li><a href="#Attribute Selectors"> Attribute Selectors </a>
<li><a href="#Non-mandatory Functions"> Non-mandatory Functions </a>
</ol>
<li><a href="#Identifiers planned for future deprecation">
Identifiers planned for future deprecation </a>
<ol TYPE=I >
<li><A href="#Description of Deprecated Identifiers Tests">Description of Deprecated Identifiers Tests </A>
<li><a href="#Deprecated Mandatory-to-Implement Functionality Tests">Deprecated Mandatory-to-Implement Functionality Tests </a>
<ol TYPE=A>
<li><a href="#Deprecated Attribute References"> Deprecated Attribute References </a>
<li><a href="#Deprecated Target Matching"> Deprecated Target Matching </a>
<li><a href="#Deprecated Function Evaluation"> Deprecated Function Evaluation </a>
<li><a href="#Deprecated Combining Algorithms"> Deprecated Combining Algorithms </a>
<li><a href="#Deprecated Schema components"> Deprecated Schema components </a>
</ol>
<li><a href="#Deprecated Optional, but Normative Functionality Tests">Deprecated Optional, but Normative Functionality Tests</a>
<ol TYPE=A>
<li><a href="#Deprecated Obligations"> Deprecated Obligations </a>
<li><a href="#Deprecated DefaultsType"> Deprecated DefaultsType </a>
<li><a href="#Deprecated Hierarchical Resources"> Deprecated Hierarchical Resources </a>
<li><a href="#Deprecated <ResourceContent> Element"> Deprecated <ResourceContent> Element </a>
<li><a href="#Deprecated Multiple Decisions"> Deprecated Multiple Decisions </a>
<li><a href="#Deprecated Attribute Selectors"> Deprecated Attribute Selectors </a>
<li><a href="#Deprecated Non-mandatory Functions"> Deprecated Non-mandatory Functions </a>
</ol>
</ol>
</ol>
<hr>
<ol TYPE=I>
<h2><li><a name="Description of tests"> Description of Tests </a></h2>
These tests are provided as an aid in achieving conformance to
the <a
href="http://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-os-en.doc"><i>
eXtensible Access Control Markup Language (XACML) Version 3.0
OASIS Standard</i></a>. The tests may aid in determining whether
an implementation is correctly interpreting the intent of the
XACML Version 3.0 specification, and may provide a basic level of
interoperability testing.<p>
These tests are <b>non-normative</b> and do not constitute a full
test of conformance to the XACML Version 3.0 Standard. A full
description of the requirements for conformance is included in
<i>Section 10. Conformance</i> of the <a
href="http://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-os-en.doc">
XACML Version 3.0 specification</a>. There is no OASIS- or XACML
TC- sponsored <i>branding</i> or certification program for
XACML.<p>
<!--
Except for those tests marked <a
href="#EXPERIMENTAL">EXPERIMENTAL</a>, all the tests in this
suite have undergone successful execution and review by multiple
XACML implementers and others, and thus represent some level of
consensus as to the intent of the XACML Version 1.0 Standard.<p>
-->
<h2>IMPORTANT NOTE</h2>
The tests in this suite were converted to comply with XACML 3.0 from
<a href="http://www.oasis-open.org/committees/download.php/6076/ConformanceTests.zip">
the conformance test suite for XACML 1.0 and 1.1</a>. Initial conversion was done by using pattern
matching/replacement scripts. All tests passed schema validation sucessfully against the normative
schema for
<a href="http://docs.oasis-open.org/xacml/3.0/xacml-core-v3-schema-wd-17.xsd">XSD</a> of XACML 3.0.
These tests have been run against one implementation and adjusted as needed to match the 3.0 specification.<p>
<h2>IMPORTANT NOTE (2)</h2>
This document may not be complete. There may be tests in the test suite that are not listed here.
The tests for new 3.0 features and deprecated items may be missing here but included in the directory of tests.
<h3>History of changes since XACML 2.0</h3>
Version 0.1<br/>
<ul>
<li>empty Target element is allowed in XACML 2.0
<li>AnySubject and other Any* elements in the Target are not allowed in XACML 2.0
<li>Environment element is required in Target for Request in XACML 2.0
<li>FunctionId is not allowed in Condition element in XACML 2.0
<li>IssueInstant attribute is not allowed in Attribute in XACML 2.0
<li>IIIASpecial.txt is removed, because AttributeAssignment element has AttributeValue in XACML 2.0.
<li>IIIGSpecial.txt is removed, because in XACML 2.0 it's defined that <xacml-context:Request>
is the context node for xpath expressions.
</ul>
Version 0.2<br/>
<ul>
<li>Remove DataType attribute from AttributeValue elements in *Request.xml files.
Data types should be specified in the parent Attribute element.
<li>Replace regexp-string-match in *Policy.xml files with string-regexp-match.
In XACML 2.0 this function's urn was changed to make it more consistent with names of
similar functions. Thanks to Ryan Eberhard for reporting this discrepancy in the
test suite.
</ul>
Version 0.3<br/>
<ul>
<li>Fix typos in policy combining algorithm urns. These typos were a result of
a bug in the scripts, which were used to convert XACML 1.0 conformance tests
to XACML 2.0. Thanks to Ryan Eberhard for reporting this bug in the
test suite.
</ul>
Version 0.4<br/>
<ul>
<li>IIC086-IIC091: change some attribute types to string.
<li>IIA004, IIA005 - these files contained intentional errors, which were accidentally "fixed"
when converting to xacml 2.0. Errors are reintroduced.
<li>IID029, IID030, IIE001, IIE002 - these files were not converted properly to
to xacml 2.0: Condition had FunctionId attribute. This bug was first reported by Frederic Deleon.
</ul>
Version 0.5<br/>
<ul>
<li>Included tests for new 3.0 features
<li>Added tests to exercise features from previous versions that were not exercised in any existing tests
<li>Added separate tests for Idenfiers planned for deprecation.
</ul>
<ol TYPE=A>
<h3><li><a name="Test Case Groupings">Test Case Groupings</a></h3>
Tests are divided into those that exercise
<i>Mandatory-to-Implement</i> functionality and those that
exercise <i>Optional, but normative</i> functionality.
There is also a separate section for tests of <a href="#Identifiers planned for future deprecation">Identifiers planned for future deprecation</a>.
All
implementations that claim conformance to the <i>eXtensible Access
Control Markup Language (XACML) Version 2.0 OASIS Standard</i>
<b>MUST</b> support all Mandatory-to-Implement functionality as
described in the <a
href="http://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-os-en.doc">
XACML Version 3.0 specification</a>.
Conforming implementations <b>MAY</b> additionally support
various Optional functionality areas.<p>
Tests are divided into groups based on the primary area of
functionality or schema being exercised.<p>
Each test case consists of three XML documents (or sets of documents):<p>
<ol TYPE=1>
<li>An XACML Request
<li>An XACML Policy or set of Policy documents
<li>An XACML Response
</ol>
<p>
Each XML document is named according to the section of this
document in which it occurs. For example, the XML
documents for the test in Part II (Mandatory to
implement), Section B (Target Matching), Test Case 8 (Case:
match: multiple actions) are named:<p>
<ul>
<li>IIB008Request.xml
<li>IIB008Policy.xml
<li>IIB008Response.xml
</ul>
<P>
The documents for <a href="#Identifiers planned for future deprecation">Identifiers planned for future deprecation</a>
use slightly different names. See that section for more details.
<P>
Tests for new 3.0 features are generally numbered starting with 300 rather than following the numbers of previous tests.
This was done to avoid potential conflicts, to keep the new 3.0 tests separate, and because in some cases the logical number for a test was already in use.
For example, the new Rule-level ordered-deny-override tests would logically have been related to the existing IID001 & IID002 (unordered) deny-override tests,
but all of the numbers in that vicinity are already taken.
<P>
Also, numbers in a group may not be consecutive. For example IID330-IID333 followed by IID340-IID343.
This is not necessarily especially meaningful. In this case the two groups are testing deny-unless-permit and permit-unless-deny which are mirror images of each other
so it was easier to copy a group of tests and mass-edit them than creating tests exactly in sequence.
<BR>
However, the gaps do provide spaces for future growth.
<h3><li><a name="How to Use the Tests">How to Use the Tests</a></h3>
An implementation of an XACML Policy Decision Point (PDP) should
be able to:<p>
<ol TYPE=1>
<li>Accept the given Request, or input <a href="#consistent with"><i>consistent with</i></a> the
given Request, as input.
<li>Accept the given Policy or Policies (these files may
contain one or more XACML Policies or PolicySets) as input.
<li>Produce the given Response, or output <a href="#consistent with">
<i>consistent with</i></a> the given Response, as output.
</ol>
<p>
<a name="consistent with">Explanation of <i>consistent with</i></a>:<p>
<blockquote>
The request and response used in executing these tests need not
be instances of the XACML Context Schema. The request and
response should, however, contain exactly the same information as
the given Request and Response file, and should exercise the XACML
policy evaluation functionality that the test is intended to
exercise. It should be possible, at least conceptually, to
mechanically convert the request and response used in the
implementation to the given XACML Request and Response
instances.<p>
</blockquote>
<h3><li><a name="Preparing Tests for Execution">Preparing Tests for Execution</a></h3>
In general, for each test,<p>
<ol>
<li>Either,
<ol TYPE=a>
<li>store the <code>*Policy.xml</code> file for the given
test in the repository you use for policies, such that the
specified <code>*Policy.xml</code> is the only policy that will
be retrieved by the PDP, or
<li> configure the PDP with the
<code>*Policy.xml</code> file as its initial policy.
</ol><p>
<li>Send the <code>*Request.xml</code> file (or its semantic
equivalent in your system) to the Context Handler component of
the XACML PDP via your access control decision request
API.<p>
<li>Compare the result returned from the PDP with the specified
<code>*Response.xml</code> file (or its semantic equivalent in
your system).<p>
<li>The test passes if your system's result is semantically
equivalent to the specified <code>*Response.xml</code> file.<p>
</ol>
Some of the tests have <i>special instructions</i> associated
with them. They modify the instructions given above for the
given test.<p>
<h3><li><a name="Contributions of New Tests">Contributions of New
Tests</a></h3>
Any XACML implementer may contribute additional conformance
tests</a> by submitting them to the <a
href="mailto:xacml-comment@lists.oasis-open.org">
xacml-comment@lists.oasis-open.org </a> mailing list. Such
contributions will be incorporated into the test suite on the next
update.<p>
While this suite of tests is non-normative, we hope the suite
will represent a general consensus as to the intent of the XACML
Version 2.0 Standard. For this reason, contributed tests are
marked <font color="red">**EXPERIMENTAL**</font></a>
until the tests have undergone successful review and use, defined
as follows:<p>
<ol>
<li> a reasonable review period has elapsed since submission, and
<li> several implementers have reported successful execution of
these tests to
<a href="mailto:xacml-comment@lists.oasis-open.org">
xacml-comment@lists.oasis-open.org,</a> and
<li> no objections to the test have been reported to the
xacml-comment mailing list.
</ol><p>
Once the tests have undergone successful review and use, then the
<font color="red">**EXPERIMENTAL**</font></a> status will be
removed.<p>
If an objection is reported on the xacml-comment mailing list to
an <font
color="red">**EXPERIMENTAL**</font> test during the review
period, then the test will be removed from the test suite on the
next update unless the XACML TC upholds the objection. It is up
to the test submitter to request review by the TC, and it is up
to the TC to decide whether or not to review a test.<p>
If an objection is reported to a test that is no longer <font
color="red">**EXPERIMENTAL**</font></a>, the objection is treated
as a bug. See <a href="#Bugs in the Tests"> Bugs in the
Tests </a> for a
description of how bugs are handled.<p>
<h3><li><a name="Bugs in the Tests">Bugs in the Tests</a></h3>
Following are the known bugs:<p>
<ol>
<li>The <Description> in many *Policy.xml files is incorrect:
instead of "read or write Bart Simpson's medical record", the
description should say "perform any action on any
resource".
</ol><p>
If you believe any test does not correctly interpret the intent
of the <a
href="http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-core-spec-os.pdf">
eXtensible Access Control Markup Language (XACML) Version 2.0 OASIS Standard</a>, or if you find any
additional errors in these tests, please submit a report to the
<a href="mailto:xacml-comment@lists.oasis-open.org">
xacml-comment@lists.oasis-open.org</a> mailing list. Absent any
objections to a bug report, minor bugs
may be fixed at the test editor's discretion in the next test
suite update.<p>
Major or controversial bugs reported against non-<a
href="#Contributions of New Tests"><font
color="red">**EXPERIMENTAL**</font></a>
tests will be reviewed by the XACML TC. If the TC agrees that
the test does not conform to the intent of the XACML Version 2.0
Standard, then the test will be modified or removed as
appropriate on the next test suite update.<p>
Major or controversial bugs reported against tests marked <a
href="#Contributions of New Tests"><font
color="red">**EXPERIMENTAL**</font></a> will be treated as an
<i>objection</i> to the test. See
<a href="#Contributions of New Tests"> Contributions of New Tests
</a> for the handling of such objections.<p>
Periodically, an updated copy of the entire Conformance Test
Suite, containing all corrections to date, will be posted to the
XACML TC Web Site.
<!--
Anyone may request to have updates to the
full Conformance Test Suite directly e-mailed to them at the same
time that the update is submitted to the XACML TC web site
maintainer: e-mail a request to <a
href="mailto:Anne.Anderson@Sun.COM"> Anne.Anderson@Sun.COM </a>.
Please be aware that this is a large e-mail :-).
-->
<p>
</ol>
<hr>
<h2><li><a name="Mandatory-to-Implement Functionality Tests">
Mandatory-to-Implement Functionality Tests </a></h2>
This section contains tests of all mandatory-to-implement
functionality. All implementations that conform to the XACML
Version 2.0 Standard should pass all these tests except as
explained in any associated <i>Special Instructions
(<code><test ID>Special.txt</code>)</i> file.<p>
<ol TYPE=A>
<h3><li><a name="Attribute References"> Attribute References </a></h3>
These tests exercise referencing of attribute values in the
Request by a policy.<p>
<ol>
<li>Case: Simple type attribute element present in Request
<i><a href="IIA001Request.xml">Request</a>,<a href="IIA001Policy.xml">Policy</a>,<a href="IIA001Response.xml">Response</a></i>
<li>Case: Simple type attribute element not present in
original decision Request, but retrievable from
Attribute repository
<i><a href="IIA002Request.xml">Request</a>,<a
href="IIA002Policy.xml">Policy</a>,<a
href="IIA002Response.xml">Response</a>,
<a href="IIA002Special.txt">Special Instructions</a></i>
<li>Case: Simple type attribute element not present in
Request and not retrievable by Attribute Authority
<i><a href="IIA003Request.xml">Request</a>,<a
href="IIA003Policy.xml">Policy</a>,<a
href="IIA003Response.xml">Response</a></i>
<li>Case: <i>INVALID</i> syntax for Attribute Designator
<i><a href="IIA004Request.xml">Request</a>,<a
href="IIA004Policy.xml">Policy</a>,<a
href="IIA004Response.xml">Response</a>,<a
href="IIA004Special.txt">Special Instructions</a></i>
<li>Case: <i>INVALID</i> syntax for Request attribute
<i><a href="IIA005Request.xml">Request</a>,<a
href="IIA005Policy.xml">Policy</a>,<a
href="IIA005Response.xml">Response</a></i>
<li>Case: TRUE: "MustBePresent" XML attribute in Target Designator
<i><a href="IIA006Request.xml">Request</a>,<a
href="IIA006Policy.xml">Policy</a>,<a
href="IIA006Response.xml">Response</a></i>
<li>Case: FALSE: "MustBePresent" XML attribute in Target Designator
<i><a href="IIA007Request.xml">Request</a>,<a
href="IIA007Policy.xml">Policy</a>,<a
href="IIA007Response.xml">Response</a></i>
<li>Case: TRUE: "MustBePresent" XML attribute in Condition Designator
<i><a href="IIA008Request.xml">Request</a>,<a
href="IIA008Policy.xml">Policy</a>,<a
href="IIA008Response.xml">Response</a></i>
<li>Case: FALSE: "MustBePresent" XML attribute in Condition Designator
<i><a href="IIA009Request.xml">Request</a>,<a
href="IIA009Policy.xml">Policy</a>,<a
href="IIA009Response.xml">Response</a></i>
<li>Case: Permit: Multiple attributes match except for DataType
<i><a href="IIA010Request.xml">Request</a>,<a
href="IIA010Policy.xml">Policy</a>,<a
href="IIA010Response.xml">Response</a></i>
<li>Case: Indeterminate: Multiple attributes match except for DataType
<i><a href="IIA011Request.xml">Request</a>,<a
href="IIA011Policy.xml">Policy</a>,<a
href="IIA011Response.xml">Response</a></i>
<li>Case: Permit: Multiple subjects with same subject-category:
different attribute in each
<i><a href="IIA012Request.xml">Request</a>,<a
href="IIA012Policy.xml">Policy</a>,<a
href="IIA012Response.xml">Response</a></i>
<li>Case: Indeterminate: Multiple subjects with same
subject-category: same attributes in each
<i><a href="IIA013Request.xml">Request</a>,<a
href="IIA013Policy.xml">Policy</a>,<a
href="IIA013Response.xml">Response</a></i>
<li>Case: Permit: SubjectAttributeDesignator with
SubjectCategory XML attribute
<i><a href="IIA014Request.xml">Request</a>,<a
href="IIA014Policy.xml">Policy</a>,<a
href="IIA014Response.xml">Response</a></i>
<li>Case: Permit: SubjectAttributeDesignator without
SubjectCategory XML attribute
<i><a href="IIA015Request.xml">Request</a>,<a
href="IIA015Policy.xml">Policy</a>,<a
href="IIA015Response.xml">Response</a></i>
<li>Case: explicit environment:current-time attribute. Updates: Rule description is modified
to match the condition. Aug 11, 2005 - Argyn Kuketayev.
<i><a href="IIA016Request.xml">Request</a>,<a
href="IIA016Policy.xml">Policy</a>,<a
href="IIA016Response.xml">Response</a></i>
<li>Case: implicit environment:current-time attribute
<i><a href="IIA017Request.xml">Request</a>,<a
href="IIA017Policy.xml">Policy</a>,<a
href="IIA017Response.xml">Response</a></i>
<li>Case: explicit environment:current-date attribute
<i><a href="IIA018Request.xml">Request</a>,<a
href="IIA018Policy.xml">Policy</a>,<a
href="IIA018Response.xml">Response</a></i>
<li>Case: implicit environment:current-date attribute
<i><a href="IIA019Request.xml">Request</a>,<a
href="IIA019Policy.xml">Policy</a>,<a
href="IIA019Response.xml">Response</a></i>
<li>Case: explicit environment:current-dateTime attribute
<i><a href="IIA020Request.xml">Request</a>,<a
href="IIA020Policy.xml">Policy</a>,<a
href="IIA020Response.xml">Response</a></i>
<li>Case: implicit environment:current-dateTime attribute
<i><a href="IIA021Request.xml">Request</a>,<a
href="IIA021Policy.xml">Policy</a>,<a
href="IIA021Response.xml">Response</a></i>
<li>Case: Test that all DataTypes with IncludeInResult=true show up in result<br>
<a href="#Contributions of New Tests">
<font color="red">**EXPERIMENTAL**</font></a>
Contributed by Glenn Griffin <glenngriffin@research.att.com>. Added to this
test suite March 2014.<br>
<i><a href="IIA022Request.xml">Request</a>,<a href="IIA022Policy.xml">Policy</a>,<a href="IIA022Response.xml">Response</a>,<a href="IIA022Response.json"> JSON Response</a></i>
<li>Case: Test that all DataTypes as Arrays (same Category, AttributeId, Issuer, DataType) with IncludeInResult=true show up in result.
ALSO test that selection works with array of values.<br>
<a href="#Contributions of New Tests">
<font color="red">**EXPERIMENTAL**</font></a>
Contributed by Glenn Griffin <glenngriffin@research.att.com>. Added to this
test suite March 2014.<br>
<i><a href="IIA023Request.xml">Request</a>,<a href="IIA023Policy.xml">Policy</a>,<a href="IIA023Response.xml">Response</a></i>
<li>Case: Test all DataTypes as Arrays (same Category, AttributeId, Issuer, DIFFERENT DataType) with IncludeInResult=true.<br>
<a href="#Contributions of New Tests">
<font color="red">**EXPERIMENTAL**</font></a>
Contributed by Glenn Griffin <glenngriffin@research.att.com>. Added to this
test suite March 2014.<br>
<i><a href="IIA024Request.xml">Request</a>,<a href="IIA024Policy.xml">Policy</a>,<a href="IIA024Response.xml">Response</a></i>
</ol>
<h3><li><a name="Target Matching"> Target Matching </a></h3>
These tests exercise various forms of Target matching.<p>
<ol>
<li>Case: match: anySubject, anyResource, anyAction
<i><a href="IIB001Request.xml">Request</a>,<a href="IIB001Policy.xml">Policy</a>,<a href="IIB001Response.xml">Response</a></i>
<p>
<li>Case: match: anySubject, anyResource, specified Action value
<i><a href="IIB002Request.xml">Request</a>,<a href="IIB002Policy.xml">Policy</a>,<a href="IIB002Response.xml">Response</a></i>
<li>Case: no match: anySubject, anyResource, specified Action value
<i><a href="IIB003Request.xml">Request</a>,<a href="IIB003Policy.xml">Policy</a>,<a href="IIB003Response.xml">Response</a></i>
<li>Case: match: anySubject, anyResource, two specified Action attributes
<i><a href="IIB004Request.xml">Request</a>,<a href="IIB004Policy.xml">Policy</a>,<a href="IIB004Response.xml">Response</a></i>
<li>Case: no match: anySubject, anyResource, two specified Action attributes
<i><a href="IIB005Request.xml">Request</a>,<a href="IIB005Policy.xml">Policy</a>,<a href="IIB005Response.xml">Response</a></i>
<li>Case: match: impliedAction
<i><a href="IIB006Request.xml">Request</a>,<a href="IIB006Policy.xml">Policy</a>,<a href="IIB006Response.xml">Response</a></i>
<li>Case: no match: impliedAction
<i><a href="IIB007Request.xml">Request</a>,<a href="IIB007Policy.xml">Policy</a>,<a href="IIB007Response.xml">Response</a></i>
<li>Case: match: multiple actions
<i><a href="IIB008Request.xml">Request</a>,<a href="IIB008Policy.xml">Policy</a>,<a href="IIB008Response.xml">Response</a></i>
<li>Case: no match: multiple actions
<i><a href="IIB009Request.xml">Request</a>,<a href="IIB009Policy.xml">Policy</a>,<a href="IIB009Response.xml">Response</a></i>
<p>
<li>Case: match: Subject with specific SubjectCategory
<i><a href="IIB010Request.xml">Request</a>,<a href="IIB010Policy.xml">Policy</a>,<a href="IIB010Response.xml">Response</a></i>
<li>Case: no match: Subject with specific SubjectCategory
<i><a href="IIB011Request.xml">Request</a>,<a href="IIB011Policy.xml">Policy</a>,<a href="IIB011Response.xml">Response</a></i>
<li>Case: match: Subject with specific SubjectId value
<i><a href="IIB012Request.xml">Request</a>,<a href="IIB012Policy.xml">Policy</a>,<a href="IIB012Response.xml">Response</a></i>
<li>Case: no match: Subject with specific SubjectID value
<i><a href="IIB013Request.xml">Request</a>,<a href="IIB013Policy.xml">Policy</a>,<a href="IIB013Response.xml">Response</a></i>
<li>Case: match: Subject with non-string SubjectId DataType and value
<i><a href="IIB014Request.xml">Request</a>,<a href="IIB014Policy.xml">Policy</a>,<a href="IIB014Response.xml">Response</a></i>
<li>Case: no match: Subject with non-string SubjectId DataType and value
<i><a href="IIB015Request.xml">Request</a>,<a href="IIB015Policy.xml">Policy</a>,<a href="IIB015Response.xml">Response</a></i>
<li>Case: match: Subject with specific KeyInfo value
<i><a href="IIB016Request.xml">Request</a>,<a href="IIB016Policy.xml">Policy</a>,<a href="IIB016Response.xml">Response</a></i>
<li>Case: no match: Subject with specific KeyInfo value
<i><a href="IIB017Request.xml">Request</a>,<a href="IIB017Policy.xml">Policy</a>,<a href="IIB017Response.xml">Response</a></i>
<li>Case: match: Subject AttributeId
<i><a href="IIB018Request.xml">Request</a>,<a href="IIB018Policy.xml">Policy</a>,<a href="IIB018Response.xml">Response</a></i>
<li>Case: no match: Subject AttributeId
<i><a href="IIB019Request.xml">Request</a>,<a href="IIB019Policy.xml">Policy</a>,<a href="IIB019Response.xml">Response</a></i>
<li>Case: match: Subject AttributeId and Issuer
<i><a href="IIB020Request.xml">Request</a>,<a href="IIB020Policy.xml">Policy</a>,<a href="IIB020Response.xml">Response</a></i>
<li>Case: no match: Subject AttributeId and Issuer
<i><a href="IIB021Request.xml">Request</a>,<a href="IIB021Policy.xml">Policy</a>,<a href="IIB021Response.xml">Response</a></i>
<li>Case: match: Subject AttributeId and IssueInstant
<i><a href="IIB022Request.xml">Request</a>,<a href="IIB022Policy.xml">Policy</a>,<a href="IIB022Response.xml">Response</a></i>
<li>Case: no match: Subject AttributeId and IssueInstant
<i><a href="IIB023Request.xml">Request</a>,<a href="IIB023Policy.xml">Policy</a>,<a href="IIB023Response.xml">Response</a></i>
<li>Case: match: Subject AttributeId, Issuer, and IssueInstant
<i><a href="IIB024Request.xml">Request</a>,<a href="IIB024Policy.xml">Policy</a>,<a href="IIB024Response.xml">Response</a></i>
<li>Case: no match: Subject AttributeId, Issuer, and IssueInstant
<i><a href="IIB025Request.xml">Request</a>,<a href="IIB025Policy.xml">Policy</a>,<a href="IIB025Response.xml">Response</a></i>
<li>Case: match: Subject identifier value and attribute value
<i><a href="IIB026Request.xml">Request</a>,<a href="IIB026Policy.xml">Policy</a>,<a href="IIB026Response.xml">Response</a></i>
<li>Case: no match: Subject identifier value and attribute value
<i><a href="IIB027Request.xml">Request</a>,<a href="IIB027Policy.xml">Policy</a>,<a href="IIB027Response.xml">Response</a></i>
<li>Case: match: multiple Subjects
<i><a href="IIB028Request.xml">Request</a>,<a href="IIB028Policy.xml">Policy</a>,<a href="IIB028Response.xml">Response</a></i>
<li>Case: no match: multiple Subjects
<i><a href="IIB029Request.xml">Request</a>,<a href="IIB029Policy.xml">Policy</a>,<a href="IIB029Response.xml">Response</a></i>
<p>
<li>Case: match: ResourceId
<i><a href="IIB030Request.xml">Request</a>,<a href="IIB030Policy.xml">Policy</a>,<a href="IIB030Response.xml">Response</a></i>
<li>Case: no match: ResourceId
<i><a href="IIB031Request.xml">Request</a>,<a href="IIB031Policy.xml">Policy</a>,<a href="IIB031Response.xml">Response</a></i>
<li>Case: match: ResourceId with specific DataType
<i><a href="IIB032Request.xml">Request</a>,<a href="IIB032Policy.xml">Policy</a>,<a href="IIB032Response.xml">Response</a></i>
<li>Case: no match: ResourceId with specific DataType
<i><a href="IIB033Request.xml">Request</a>,<a href="IIB033Policy.xml">Policy</a>,<a href="IIB033Response.xml">Response</a></i>
<li>Case: match: Resource AttributeId
<i><a href="IIB034Request.xml">Request</a>,<a href="IIB034Policy.xml">Policy</a>,<a href="IIB034Response.xml">Response</a></i>
<li>Case: no match: Resource AttributeId
<i><a href="IIB035Request.xml">Request</a>,<a href="IIB035Policy.xml">Policy</a>,<a href="IIB035Response.xml">Response</a></i>
<li>Case: match: Resource AttributeId and Issuer
<i><a href="IIB036Request.xml">Request</a>,<a href="IIB036Policy.xml">Policy</a>,<a href="IIB036Response.xml">Response</a></i>
<li>Case: no match: Resource AttributeId and Issuer
<i><a href="IIB037Request.xml">Request</a>,<a href="IIB037Policy.xml">Policy</a>,<a href="IIB037Response.xml">Response</a></i>
<li>Case: match: Resource AttributeId and IssueInstant
<i><a href="IIB038Request.xml">Request</a>,<a href="IIB038Policy.xml">Policy</a>,<a href="IIB038Response.xml">Response</a></i>
<li>Case: no match: Resource AttributeId and IssueInstant
<i><a href="IIB039Request.xml">Request</a>,<a href="IIB039Policy.xml">Policy</a>,<a href="IIB039Response.xml">Response</a></i>
<li>Case: match: Resource AttributeId, Issuer, and IssueInstant
<i><a href="IIB040Request.xml">Request</a>,<a href="IIB040Policy.xml">Policy</a>,<a href="IIB040Response.xml">Response</a></i>
<li>Case: no match: Resource AttributeId, Issuer, and IssueInstant
<i><a href="IIB041Request.xml">Request</a>,<a href="IIB041Policy.xml">Policy</a>,<a href="IIB041Response.xml">Response</a></i>
<li>Case: match: Resource identifier value and attribute value
<i><a href="IIB042Request.xml">Request</a>,<a href="IIB042Policy.xml">Policy</a>,<a href="IIB042Response.xml">Response</a></i>
<li>Case: no match: Resource identifier value and attribute value
<i><a href="IIB043Request.xml">Request</a>,<a href="IIB043Policy.xml">Policy</a>,<a href="IIB043Response.xml">Response</a></i>
<li>Case: match: multiple resources
<i><a href="IIB044Request.xml">Request</a>,<a href="IIB044Policy.xml">Policy</a>,<a href="IIB044Response.xml">Response</a></i>
<li>Case: no match: multiple resources
<i><a href="IIB045Request.xml">Request</a>,<a href="IIB045Policy.xml">Policy</a>,<a href="IIB045Response.xml">Response</a></i>
<p>
<li>Case: match: specified Subject and Resource
<i><a href="IIB046Request.xml">Request</a>,<a href="IIB046Policy.xml">Policy</a>,<a href="IIB046Response.xml">Response</a></i>
<li>Case: no match: specified Subject and Resource
<i><a href="IIB047Request.xml">Request</a>,<a href="IIB047Policy.xml">Policy</a>,<a href="IIB047Response.xml">Response</a></i>
<li>Case: match: specified Subject, Action
<i><a href="IIB048Request.xml">Request</a>,<a href="IIB048Policy.xml">Policy</a>,<a href="IIB048Response.xml">Response</a></i>
<li>Case: no match: specified Subject, Action
<i><a href="IIB049Request.xml">Request</a>,<a href="IIB049Policy.xml">Policy</a>,<a href="IIB049Response.xml">Response</a></i>
<li>Case: match: specified Resource, Action
<i><a href="IIB050Request.xml">Request</a>,<a href="IIB050Policy.xml">Policy</a>,<a href="IIB050Response.xml">Response</a></i>
<li>Case: no match: specified Resource, Action
<i><a href="IIB051Request.xml">Request</a>,<a href="IIB051Policy.xml">Policy</a>,<a href="IIB051Response.xml">Response</a></i>
<li>Case: match: specified Subject, Resource, Action
<i><a href="IIB052Request.xml">Request</a>,<a href="IIB052Policy.xml">Policy</a>,<a href="IIB052Response.xml">Response</a></i>
<li>Case: no match: specified Subject, Resource, Action
<i><a href="IIB053Request.xml">Request</a>,<a href="IIB053Policy.xml">Policy</a>,<a href="IIB053Response.xml">Response</a></i>
</ol>
<P>
Tests for Release 3.0 functionality.
<P>
<ol start=300>
<li>Case: Target Matching: Enhanced Target (succeed)<br>
<a href="#Contributions of New Tests">
<font color="red">**EXPERIMENTAL**</font></a>
Contributed by Glenn Griffin <glenngriffin@research.att.com>. Added to this
test suite March 2014.<br>
<i><a href="IIB300Request.xml">Request</a>,<a href="IIB300Policy.xml">Policy</a>,<a href="IIB300Response.xml">Response</a></i>
<li>Case: Target Matching: Enhanced Target (fail)<br>
<a href="#Contributions of New Tests">
<font color="red">**EXPERIMENTAL**</font></a>
Contributed by Glenn Griffin <glenngriffin@research.att.com>. Added to this
test suite March 2014.<br>
<i><a href="IIB301Request.xml">Request</a>,<a href="IIB301Policy.xml">Policy</a>,<a href="IIB301Response.xml">Response</a></i>
</ol>
<h3><li><a name="Function Evaluation"> Function Evaluation </a></h3>
These tests exercise each of the mandatory-to-implement functions.<p>
<ol>
<b>GENERAL APPLY TESTS</b>
<li>Case: Apply with Apply argument
<i><a href="IIC001Request.xml">Request</a>,<a href="IIC001Policy.xml">Policy</a>,<a href="IIC001Response.xml">Response</a></i>
<li>Case: Apply with AttributeValue argument
<i><a href="IIC002Request.xml">Request</a>,<a href="IIC002Policy.xml">Policy</a>,<a href="IIC002Response.xml">Response</a></i>
<li>Case: Apply with single-element bag where function expects primitive type
<i><a href="IIC003Request.xml">Request</a>,
<a href="IIC003Policy.xml">Policy</a>,
<a href="IIC003Response.xml">Response</a>,
<a href="IIC003Special.txt">Special Instructions</a></i>
<li>Case: Apply with SubjectAttributeDesignator argument
<i><a href="IIC004Request.xml">Request</a>,<a href="IIC004Policy.xml">Policy</a>,<a href="IIC004Response.xml">Response</a></i>
<li>Case: Apply with ResourceAttributeDesignator argument
<i><a href="IIC005Request.xml">Request</a>,<a href="IIC005Policy.xml">Policy</a>,<a href="IIC005Response.xml">Response</a></i>
<li>Case: Apply with ActionAttributeDesignator argument
<i><a href="IIC006Request.xml">Request</a>,<a href="IIC006Policy.xml">Policy</a>,<a href="IIC006Response.xml">Response</a></i>
<li>Case: Apply with EnvironmentAttributeDesignator argument
<i><a href="IIC007Request.xml">Request</a>,<a href="IIC007Policy.xml">Policy</a>,<a href="IIC007Response.xml">Response</a></i>
<li>Case: Apply with empty bag argument
<i><a href="IIC008Request.xml">Request</a>,<a href="IIC008Policy.xml">Policy</a>,<a href="IIC008Response.xml">Response</a></i>
<li>Case: Apply with multiple-element bag argument
<i><a href="IIC009Request.xml">Request</a>,<a href="IIC009Policy.xml">Policy</a>,<a href="IIC009Response.xml">Response</a></i>
<li>Case: true: Condition Evaluation
<i><a href="IIC010Request.xml">Request</a>,<a href="IIC010Policy.xml">Policy</a>,<a href="IIC010Response.xml">Response</a></i>
<li>Case: false: Condition Evaluation
<i><a href="IIC011Request.xml">Request</a>,<a href="IIC011Policy.xml">Policy</a>,<a href="IIC011Response.xml">Response</a></i>
<li>Case: ERROR: Condition Evaluation - non-boolean datatype
<i><a href="IIC012Request.xml">Request</a>,<a
href="IIC012Policy.xml">Policy</a>,<a
href="IIC012Response.xml">Response</a>,
<a href="IIC012Special.txt">Special Instructions</a></i>
<p>
<b>ARITHMETIC FUNCTIONS</b>
<li>Case: function:integer-add
<i><a href="IIC013Request.xml">Request</a>,<a href="IIC013Policy.xml">Policy</a>,<a href="IIC013Response.xml">Response</a></i>
<li>Case: ERROR: function:integer-add - non-integer datatype
<i><a href="IIC014Request.xml">Request</a>,<a
href="IIC014Policy.xml">Policy</a>,<a
href="IIC014Response.xml">Response</a>,
<a href="IIC014Special.txt">Special Instructions</a></i>
<li>Case: function:double-add
<i><a href="IIC015Request.xml">Request</a>,<a href="IIC015Policy.xml">Policy</a>,<a href="IIC015Response.xml">Response</a></i>
<li>Case: function:integer-subtract
<i><a href="IIC016Request.xml">Request</a>,<a href="IIC016Policy.xml">Policy</a>,<a href="IIC016Response.xml">Response</a></i>
<li>Case: function:double-subtract
<i><a href="IIC017Request.xml">Request</a>,<a href="IIC017Policy.xml">Policy</a>,<a href="IIC017Response.xml">Response</a></i>
<li>Case: function:integer-multiply
<i><a href="IIC018Request.xml">Request</a>,<a href="IIC018Policy.xml">Policy</a>,<a href="IIC018Response.xml">Response</a></i>
<li>Case: function:double-multiply
<i><a href="IIC019Request.xml">Request</a>,<a href="IIC019Policy.xml">Policy</a>,<a href="IIC019Response.xml">Response</a></i>
<li>Case: function:integer-divide
<i><a href="IIC020Request.xml">Request</a>,<a href="IIC020Policy.xml">Policy</a>,<a href="IIC020Response.xml">Response</a></i>
<li>Case: function:double-divide
<i><a href="IIC021Request.xml">Request</a>,<a href="IIC021Policy.xml">Policy</a>,<a href="IIC021Response.xml">Response</a></i>
<li>Case: function:integer-mod
<i><a href="IIC022Request.xml">Request</a>,<a href="IIC022Policy.xml">Policy</a>,<a href="IIC022Response.xml">Response</a></i>
<li>Case: function:double-mod: IIC023*.xml: TEST DELETED
<li>Case: function:round
<i><a href="IIC024Request.xml">Request</a>,<a href="IIC024Policy.xml">Policy</a>,<a href="IIC024Response.xml">Response</a></i>
<li>Case: function:floor
<i><a href="IIC025Request.xml">Request</a>,<a href="IIC025Policy.xml">Policy</a>,<a href="IIC025Response.xml">Response</a></i>
<li>Case: function:integer-abs
<i><a href="IIC026Request.xml">Request</a>,<a href="IIC026Policy.xml">Policy</a>,<a href="IIC026Response.xml">Response</a></i>
<li>Case: function:double-abs
<i><a href="IIC027Request.xml">Request</a>,<a
href="IIC027Policy.xml">Policy</a>,<a
href="IIC027Response.xml">Response</a></i>
<p>
<b>ARITHMETIC CONVERSION FUNCTIONS</b>
<li>Case: function:double-to-integer
<i><a href="IIC028Request.xml">Request</a>,<a href="IIC028Policy.xml">Policy</a>,<a href="IIC028Response.xml">Response</a></i>
<li>Case: function:integer-to-double
<i><a href="IIC029Request.xml">Request</a>,<a href="IIC029Policy.xml">Policy</a>,<a href="IIC029Response.xml">Response</a></i>
<p>
<b>EQUALITY FUNCTIONS</b>
<li>Case: true: function:integer-equal
<i><a href="IIC030Request.xml">Request</a>,<a href="IIC030Policy.xml">Policy</a>,<a href="IIC030Response.xml">Response</a></i>
<li>Case: false: function:integer-equal
<i><a href="IIC031Request.xml">Request</a>,<a href="IIC031Policy.xml">Policy</a>,<a href="IIC031Response.xml">Response</a></i>
<li>Case: true: function:double-equal
<i><a href="IIC032Request.xml">Request</a>,<a href="IIC032Policy.xml">Policy</a>,<a href="IIC032Response.xml">Response</a></i>
<li>Case: false: function:double-equal
<i><a href="IIC033Request.xml">Request</a>,<a href="IIC033Policy.xml">Policy</a>,<a href="IIC033Response.xml">Response</a></i>
<li>Case: true: function:boolean-equal
<i><a href="IIC034Request.xml">Request</a>,<a href="IIC034Policy.xml">Policy</a>,<a href="IIC034Response.xml">Response</a></i>
<li>Case: false: function:boolean-equal
<i><a href="IIC035Request.xml">Request</a>,<a href="IIC035Policy.xml">Policy</a>,<a href="IIC035Response.xml">Response</a></i>
<li>Case: true: function:string-equal
<i><a href="IIC036Request.xml">Request</a>,<a href="IIC036Policy.xml">Policy</a>,<a href="IIC036Response.xml">Response</a></i>
<li>Case: false: function:string-equal
<i><a href="IIC037Request.xml">Request</a>,<a href="IIC037Policy.xml">Policy</a>,<a href="IIC037Response.xml">Response</a></i>
<li>Case: true: function:rfc822Name-equal
<i><a href="IIC038Request.xml">Request</a>,<a href="IIC038Policy.xml">Policy</a>,<a href="IIC038Response.xml">Response</a></i>
<li>Case: false: function:rfc822Name-equal
<i><a href="IIC039Request.xml">Request</a>,<a href="IIC039Policy.xml">Policy</a>,<a href="IIC039Response.xml">Response</a></i>
<li>Case: true: function:x500Name-equal
<i><a href="IIC040Request.xml">Request</a>,<a href="IIC040Policy.xml">Policy</a>,<a href="IIC040Response.xml">Response</a></i>
<li>Case: false: function:x500Name-equal
<i><a href="IIC041Request.xml">Request</a>,<a href="IIC041Policy.xml">Policy</a>,<a href="IIC041Response.xml">Response</a></i>
<li>Case: true: function:date-equal
<i><a href="IIC042Request.xml">Request</a>,<a href="IIC042Policy.xml">Policy</a>,<a href="IIC042Response.xml">Response</a></i>
<li>Case: false: function:date-equal
<i><a href="IIC043Request.xml">Request</a>,<a href="IIC043Policy.xml">Policy</a>,<a href="IIC043Response.xml">Response</a></i>
<li>Case: true: function:time-equal
<i><a href="IIC044Request.xml">Request</a>,<a href="IIC044Policy.xml">Policy</a>,<a href="IIC044Response.xml">Response</a></i>
<li>Case: false: function:time-equal
<i><a href="IIC045Request.xml">Request</a>,<a href="IIC045Policy.xml">Policy</a>,<a href="IIC045Response.xml">Response</a></i>
<li>Case: true: function:dateTime-equal
<i><a href="IIC046Request.xml">Request</a>,<a href="IIC046Policy.xml">Policy</a>,<a href="IIC046Response.xml">Response</a></i>
<li>Case: false: function:dateTime-equal
<i><a href="IIC047Request.xml">Request</a>,<a href="IIC047Policy.xml">Policy</a>,<a href="IIC047Response.xml">Response</a></i>
<li>Case: true: function:hexBinary-equal
<i><a href="IIC048Request.xml">Request</a>,<a href="IIC048Policy.xml">Policy</a>,<a href="IIC048Response.xml">Response</a></i>
<li>Case: false: function:hexBinary-equal
<i><a href="IIC049Request.xml">Request</a>,<a href="IIC049Policy.xml">Policy</a>,<a href="IIC049Response.xml">Response</a></i>
<li>Case: true: function:base64Binary-equal
<i><a href="IIC050Request.xml">Request</a>,<a href="IIC050Policy.xml">Policy</a>,<a href="IIC050Response.xml">Response</a></i>
<li>Case: false: function:base64Binary-equal
<i><a href="IIC051Request.xml">Request</a>,<a href="IIC051Policy.xml">Policy</a>,<a href="IIC051Response.xml">Response</a></i>
<li>Case: true: function:anyURI-equal
<i><a href="IIC052Request.xml">Request</a>,<a href="IIC052Policy.xml">Policy</a>,<a href="IIC052Response.xml">Response</a></i>
<li>Case: false: function:anyURI-equal
<i><a href="IIC053Request.xml">Request</a>,<a href="IIC053Policy.xml">Policy</a>,<a href="IIC053Response.xml">Response</a></i>
<li>Case: true: function:QName-equal: IIC054*.xml: TEST DELETED
<li>Case: false: function:QName-equal: IIC055*.xml: TEST DELETED
<p>
<b>See also <a href="#DURATION-EQUALS TESTS">DURATION-EQUALS TESTS</a> below.</b>
<p>
<b>String-regexp-match FUNCTION</b>
<li>Case: true: function:string-regexp-match
<i><a href="IIC056Request.xml">Request</a>,<a href="IIC056Policy.xml">Policy</a>,<a href="IIC056Response.xml">Response</a></i>
<li>Case: false: function:string-regexp-match
<i><a href="IIC057Request.xml">
Request</a>,<a href="IIC057Policy.xml">Policy</a>,<a
href="IIC057Response.xml">Response</a></i>
<p>
<b>COMPARISON FUNCTIONS: GREATER THAN, GREATER THAN OR EQUAL</b>
<li>Case: true: function:integer-greater-than
<i><a href="IIC058Request.xml">Request</a>,<a href="IIC058Policy.xml">Policy</a>,<a href="IIC058Response.xml">Response</a></i>
<li>Case: false: function:integer-greater-than
<i><a href="IIC059Request.xml">Request</a>,<a href="IIC059Policy.xml">Policy</a>,<a href="IIC059Response.xml">Response</a></i>
<li>Case: true: function:double-greater-than
<i><a href="IIC060Request.xml">Request</a>,<a href="IIC060Policy.xml">Policy</a>,<a href="IIC060Response.xml">Response</a></i>
<li>Case: false: function:double-greater-than
<i><a href="IIC061Request.xml">Request</a>,<a href="IIC061Policy.xml">Policy</a>,<a href="IIC061Response.xml">Response</a></i>
<li>Case: true: function:string-greater-than
<i><a href="IIC062Request.xml">Request</a>,<a href="IIC062Policy.xml">Policy</a>,<a href="IIC062Response.xml">Response</a></i>
<li>Case: false: function:string-greater-than
<i><a href="IIC063Request.xml">Request</a>,<a href="IIC063Policy.xml">Policy</a>,<a href="IIC063Response.xml">Response</a></i>
<li>Case: true: function:date-greater-than
<i><a href="IIC064Request.xml">Request</a>,<a href="IIC064Policy.xml">Policy</a>,<a href="IIC064Response.xml">Response</a></i>
<li>Case: false: function:date-greater-than
<i><a href="IIC065Request.xml">Request</a>,<a href="IIC065Policy.xml">Policy</a>,<a href="IIC065Response.xml">Response</a></i>
<li>Case: true: function:time-greater-than
<i><a href="IIC066Request.xml">Request</a>,<a href="IIC066Policy.xml">Policy</a>,<a href="IIC066Response.xml">Response</a></i>
<li>Case: false: function:time-greater-than
<i><a href="IIC067Request.xml">Request</a>,<a href="IIC067Policy.xml">Policy</a>,<a href="IIC067Response.xml">Response</a></i>
<li>Case: true: function:dateTime-greater-than
<i><a href="IIC068Request.xml">Request</a>,<a href="IIC068Policy.xml">Policy</a>,<a href="IIC068Response.xml">Response</a></i>
<li>Case: false: function:dateTime-greater-than
<i><a href="IIC069Request.xml">Request</a>,<a href="IIC069Policy.xml">Policy</a>,<a href="IIC069Response.xml">Response</a></i>
<li>Case: true: function:integer-greater-than-or-equal
<i><a href="IIC070Request.xml">Request</a>,<a href="IIC070Policy.xml">Policy</a>,<a href="IIC070Response.xml">Response</a></i>
<li>Case: false: function:integer-greater-than-or-equal
<i><a href="IIC071Request.xml">Request</a>,<a href="IIC071Policy.xml">Policy</a>,<a href="IIC071Response.xml">Response</a></i>
<li>Case: true: function:double-greater-than-or-equal
<i><a href="IIC072Request.xml">Request</a>,<a href="IIC072Policy.xml">Policy</a>,<a href="IIC072Response.xml">Response</a></i>
<li>Case: false: function:double-greater-than-or-equal
<i><a href="IIC073Request.xml">Request</a>,<a href="IIC073Policy.xml">Policy</a>,<a href="IIC073Response.xml">Response</a></i>
<li>Case: true: function:string-greater-than-or-equal
<i><a href="IIC074Request.xml">Request</a>,<a href="IIC074Policy.xml">Policy</a>,<a href="IIC074Response.xml">Response</a></i>
<li>Case: false: function:string-greater-than-or-equal
<i><a href="IIC075Request.xml">Request</a>,<a href="IIC075Policy.xml">Policy</a>,<a href="IIC075Response.xml">Response</a></i>
<li>Case: true: function:date-greater-than-or-equal
<i><a href="IIC076Request.xml">Request</a>,<a href="IIC076Policy.xml">Policy</a>,<a href="IIC076Response.xml">Response</a></i>
<li>Case: false: function:date-greater-than-or-equal
<i><a href="IIC077Request.xml">Request</a>,<a href="IIC077Policy.xml">Policy</a>,<a href="IIC077Response.xml">Response</a></i>
<li>Case: true: function:time-greater-than-or-equal
<i><a href="IIC078Request.xml">Request</a>,<a href="IIC078Policy.xml">Policy</a>,<a href="IIC078Response.xml">Response</a></i>
<li>Case: false: function:time-greater-than-or-equal
<i><a href="IIC079Request.xml">Request</a>,<a href="IIC079Policy.xml">Policy</a>,<a href="IIC079Response.xml">Response</a></i>
<li>Case: true: function:dateTime-greater-than-or-equal
<i><a href="IIC080Request.xml">Request</a>,<a href="IIC080Policy.xml">Policy</a>,<a href="IIC080Response.xml">Response</a></i>
<li>Case: false: function:dateTime-greater-than-or-equal
<i><a href="IIC081Request.xml">Request</a>,<a
href="IIC081Policy.xml">Policy</a>,<a
href="IIC081Response.xml">Response</a></i>
<p>
<b>rfc822Name and x500Name MATCHING FUNCTIONS</b>
<li>Case: true: function:rfc822Name-match
<i><a href="IIC082Request.xml">Request</a>,<a href="IIC082Policy.xml">Policy</a>,<a href="IIC082Response.xml">Response</a></i>
<li>Case: false: function:rfc822Name-match
<i><a href="IIC083Request.xml">Request</a>,<a href="IIC083Policy.xml">Policy</a>,<a href="IIC083Response.xml">Response</a></i>
<li>Case: true: function:x500Name-match
<i><a href="IIC084Request.xml">Request</a>,<a href="IIC084Policy.xml">Policy</a>,<a href="IIC084Response.xml">Response</a></i>
<li>Case: false: function:x500Name-match
<i><a href="IIC085Request.xml">Request</a>,<a
href="IIC085Policy.xml">Policy</a>,<a
href="IIC085Response.xml">Response</a></i>
<p>
<b>LOGICAL FUNCTIONS</b>
<li>Case: true: function:and
<i><a href="IIC086Request.xml">Request</a>,<a href="IIC086Policy.xml">Policy</a>,<a href="IIC086Response.xml">Response</a></i>
<li>Case: false: function:and
<i><a href="IIC087Request.xml">Request</a>,<a href="IIC087Policy.xml">Policy</a>,<a href="IIC087Response.xml">Response</a></i>
<li>Case: true: function:ordered-and: IIC088*.xml: TEST DELETED
<li>Case: false: function:ordered-and: IIC089*.xml: TEST DELETED
<li>Case: true: function:or
<i><a href="IIC090Request.xml">Request</a>,<a href="IIC090Policy.xml">Policy</a>,<a href="IIC090Response.xml">Response</a></i>
<li>Case: false: function:or
<i><a href="IIC091Request.xml">Request</a>,<a href="IIC091Policy.xml">Policy</a>,<a href="IIC091Response.xml">Response</a></i>
<li>Case: true: function:ordered-or: IIC092*.xml: TEST DELETED
<li>Case: false: function:ordered-or: IIC093*.xml: TEST DELETED
<li>Case: true: function:n-of
<i><a href="IIC094Request.xml">Request</a>,<a href="IIC094Policy.xml">Policy</a>,<a href="IIC094Response.xml">Response</a></i>
<li>Case: false: function:n-of
<i><a href="IIC095Request.xml">Request</a>,<a href="IIC095Policy.xml">Policy</a>,<a href="IIC095Response.xml">Response</a></i>
<li>Case: true: function:not
<i><a href="IIC096Request.xml">Request</a>,<a href="IIC096Policy.xml">Policy</a>,<a href="IIC096Response.xml">Response</a></i>
<li>Case: false: function:not
<i><a href="IIC097Request.xml">Request</a>,<a href="IIC097Policy.xml">Policy</a>,<a href="IIC097Response.xml">Response</a></i>
<li>Case: true: function:present: IIC098*.xml: TEST DELETED
<li>Case: false: function:present: IIC099*.xml: TEST DELETED
<p>
<b>STRING NORMALIZATION FUNCTIONS</b>
<li>Case: function:string-normalize-space
<i><a href="IIC100Request.xml">Request</a>,<a href="IIC100Policy.xml">Policy</a>,<a href="IIC100Response.xml">Response</a></i>
<li>Case: function:string-normalize-to-lower-case
<i><a href="IIC101Request.xml">Request</a>,<a href="IIC101Policy.xml">Policy</a>,<a href="IIC101Response.xml">Response</a></i>
<p>
<b>DURATION FUNCTIONS</b>
<li>Case: function:dateTime-add-dayTimeDuration
<i><a href="IIC102Request.xml">Request</a>,<a href="IIC102Policy.xml">Policy</a>,<a href="IIC102Response.xml">Response</a></i>
<li>Case: function:dateTime-add-yearMonthDuration
<i><a href="IIC103Request.xml">Request</a>,<a href="IIC103Policy.xml">Policy</a>,<a href="IIC103Response.xml">Response</a></i>
<li>Case: function:dateTime-subtract-dayTimeDuration
<i><a href="IIC104Request.xml">Request</a>,<a href="IIC104Policy.xml">Policy</a>,<a href="IIC104Response.xml">Response</a></i>
<li>Case: function:dateTime-subtract-yearMonthDuration
<i><a href="IIC105Request.xml">Request</a>,<a href="IIC105Policy.xml">Policy</a>,<a href="IIC105Response.xml">Response</a></i>
<li>Case: function:date-add-yearMonthDuration
<i><a href="IIC106Request.xml">Request</a>,<a href="IIC106Policy.xml">Policy</a>,<a href="IIC106Response.xml">Response</a></i>
<li>Case: function:date-subtract-yearMonthDuration
<i><a href="IIC107Request.xml">Request</a>,<a href="IIC107Policy.xml">Policy</a>,<a href="IIC107Response.xml">Response</a></i>
<p>
<b>See also <a href="#DURATION-EQUALS TESTS">DURATION-EQUALS TESTS</a> below.</b>
<p>
<b>COMPARISON FUNCTIONS: LESS THAN, LESS THAN OR EQUAL</b>
<li>Case: function:string-less-than
<i><a href="IIC108Request.xml">Request</a>,<a href="IIC108Policy.xml">Policy</a>,<a href="IIC108Response.xml">Response</a></i>
<li>Case: function:string-less-than-or-equal
<i><a href="IIC109Request.xml">Request</a>,<a href="IIC109Policy.xml">Policy</a>,<a href="IIC109Response.xml">Response</a></i>
<li>Case: function:integer-less-than
<i><a href="IIC110Request.xml">Request</a>,<a href="IIC110Policy.xml">Policy</a>,<a href="IIC110Response.xml">Response</a></i>
<li>Case: function:double-less-than
<i><a href="IIC111Request.xml">Request</a>,<a href="IIC111Policy.xml">Policy</a>,<a href="IIC111Response.xml">Response</a></i>
<li>Case: function:integer-less-than-or-equal
<i><a href="IIC112Request.xml">Request</a>,<a href="IIC112Policy.xml">Policy</a>,<a href="IIC112Response.xml">Response</a></i>
<li>Case: function:double-less-than-or-equal
<i><a href="IIC113Request.xml">Request</a>,<a href="IIC113Policy.xml">Policy</a>,<a href="IIC113Response.xml">Response</a></i>
<li>Case: function:time-less-than
<i><a href="IIC114Request.xml">Request</a>,<a href="IIC114Policy.xml">Policy</a>,<a href="IIC114Response.xml">Response</a></i>
<li>Case: function:time-less-than-or-equal
<i><a href="IIC115Request.xml">Request</a>,<a href="IIC115Policy.xml">Policy</a>,<a href="IIC115Response.xml">Response</a></i>
<li>Case: function:dateTime-less-than
<i><a href="IIC116Request.xml">Request</a>,<a href="IIC116Policy.xml">Policy</a>,<a href="IIC116Response.xml">Response</a></i>
<li>Case: function:dateTime-less-than-or-equal
<i><a href="IIC117Request.xml">Request</a>,<a href="IIC117Policy.xml">Policy</a>,<a href="IIC117Response.xml">Response</a></i>
<li>Case: function:date-less-than
<i><a href="IIC118Request.xml">Request</a>,<a href="IIC118Policy.xml">Policy</a>,<a href="IIC118Response.xml">Response</a></i>
<li>Case: function:date-less-than-or-equal
<i><a href="IIC119Request.xml">Request</a>,<a href="IIC119Policy.xml">Policy</a>,<a href="IIC119Response.xml">Response</a></i>
<p>
<b>BAG FUNCTIONS</b>
<li>Case: function:string-bag-size
<i><a href="IIC120Request.xml">Request</a>,<a href="IIC120Policy.xml">Policy</a>,<a href="IIC120Response.xml">Response</a></i>
<li>Case: function:string-bag
<i><a href="IIC121Request.xml">Request</a>,<a href="IIC121Policy.xml">Policy</a>,<a href="IIC121Response.xml">Response</a></i>
<li>Case: function:boolean-one-and-only
<i><a href="IIC122Request.xml">Request</a>,<a href="IIC122Policy.xml">Policy</a>,<a href="IIC122Response.xml">Response</a></i>
<li>Case: function:boolean-bag-size
<i><a href="IIC123Request.xml">Request</a>,<a href="IIC123Policy.xml">Policy</a>,<a href="IIC123Response.xml">Response</a></i>
<li>Case: function:boolean-is-in
<i><a href="IIC124Request.xml">Request</a>,<a href="IIC124Policy.xml">Policy</a>,<a href="IIC124Response.xml">Response</a></i>
<li>Case: function:boolean-bag
<i><a href="IIC125Request.xml">Request</a>,<a href="IIC125Policy.xml">Policy</a>,<a href="IIC125Response.xml">Response</a></i>
<li>Case: function:integer-bag-size
<i><a href="IIC126Request.xml">Request</a>,<a href="IIC126Policy.xml">Policy</a>,<a href="IIC126Response.xml">Response</a></i>
<li>Case: function:integer-is-in
<i><a href="IIC127Request.xml">Request</a>,<a href="IIC127Policy.xml">Policy</a>,<a href="IIC127Response.xml">Response</a></i>
<li>Case: function:integer-bag
<i><a href="IIC128Request.xml">Request</a>,<a href="IIC128Policy.xml">Policy</a>,<a href="IIC128Response.xml">Response</a></i>
<li>Case: function:double-bag-size
<i><a href="IIC129Request.xml">Request</a>,<a href="IIC129Policy.xml">Policy</a>,<a href="IIC129Response.xml">Response</a></i>
<li>Case: function:double-is-in
<i><a href="IIC130Request.xml">Request</a>,<a href="IIC130Policy.xml">Policy</a>,<a href="IIC130Response.xml">Response</a></i>
<li>Case: function:double-bag
<i><a href="IIC131Request.xml">Request</a>,<a href="IIC131Policy.xml">Policy</a>,<a href="IIC131Response.xml">Response</a></i>
<li>Case: function:date-bag-size
<i><a href="IIC132Request.xml">Request</a>,<a href="IIC132Policy.xml">Policy</a>,<a href="IIC132Response.xml">Response</a></i>
<li>Case: function:date-is-in
<i><a href="IIC133Request.xml">Request</a>,<a href="IIC133Policy.xml">Policy</a>,<a href="IIC133Response.xml">Response</a></i>
<li>Case: function:date-bag
<i><a href="IIC134Request.xml">Request</a>,<a href="IIC134Policy.xml">Policy</a>,<a href="IIC134Response.xml">Response</a></i>
<li>Case: function:time-bag-size
<i><a href="IIC135Request.xml">Request</a>,<a href="IIC135Policy.xml">Policy</a>,<a href="IIC135Response.xml">Response</a></i>
<li>Case: function:time-is-in
<i><a href="IIC136Request.xml">Request</a>,<a href="IIC136Policy.xml">Policy</a>,<a href="IIC136Response.xml">Response</a></i>
<li>Case: function:time-bag
<i><a href="IIC137Request.xml">Request</a>,<a href="IIC137Policy.xml">Policy</a>,<a href="IIC137Response.xml">Response</a></i>
<li>Case: function:dateTime-bag-size
<i><a href="IIC138Request.xml">Request</a>,<a href="IIC138Policy.xml">Policy</a>,<a href="IIC138Response.xml">Response</a></i>
<li>Case: function:dateTime-is-in
<i><a href="IIC139Request.xml">Request</a>,<a href="IIC139Policy.xml">Policy</a>,<a href="IIC139Response.xml">Response</a></i>
<li>Case: function:dateTime-bag
<i><a href="IIC140Request.xml">Request</a>,<a href="IIC140Policy.xml">Policy</a>,<a href="IIC140Response.xml">Response</a></i>
<li>Case: function:anyURI-bag-size
<i><a href="IIC141Request.xml">Request</a>,<a href="IIC141Policy.xml">Policy</a>,<a href="IIC141Response.xml">Response</a></i>
<li>Case: function:anyURI-is-in
<i><a href="IIC142Request.xml">Request</a>,<a href="IIC142Policy.xml">Policy</a>,<a href="IIC142Response.xml">Response</a></i>
<li>Case: function:anyURI-bag
<i><a href="IIC143Request.xml">Request</a>,<a href="IIC143Policy.xml">Policy</a>,<a href="IIC143Response.xml">Response</a></i>
<li>Case: function:hexBinary-bag-size
<i><a href="IIC144Request.xml">Request</a>,<a href="IIC144Policy.xml">Policy</a>,<a href="IIC144Response.xml">Response</a></i>
<li>Case: function:hexBinary-is-in
<i><a href="IIC145Request.xml">Request</a>,<a href="IIC145Policy.xml">Policy</a>,<a href="IIC145Response.xml">Response</a></i>
<li>Case: function:hexBinary-bag
<i><a href="IIC146Request.xml">Request</a>,<a href="IIC146Policy.xml">Policy</a>,<a href="IIC146Response.xml">Response</a></i>
<li>Case: function:base64Binary-bag-size
<i><a href="IIC147Request.xml">Request</a>,<a href="IIC147Policy.xml">Policy</a>,<a href="IIC147Response.xml">Response</a></i>
<li>Case: function:base64Binary-is-in
<i><a href="IIC148Request.xml">Request</a>,<a href="IIC148Policy.xml">Policy</a>,<a href="IIC148Response.xml">Response</a></i>
<li>Case: function:base64Binary-bag
<i><a href="IIC149Request.xml">Request</a>,<a href="IIC149Policy.xml">Policy</a>,<a href="IIC149Response.xml">Response</a></i>
<li>Case: function:dayTimeDuration-one-and-only
<i><a href="IIC150Request.xml">Request</a>,<a href="IIC150Policy.xml">Policy</a>,<a href="IIC150Response.xml">Response</a></i>
<li>Case: function:dayTimeDuration-bag-size
<i><a href="IIC151Request.xml">Request</a>,<a href="IIC151Policy.xml">Policy</a>,<a href="IIC151Response.xml">Response</a></i>
<li>Case: function:dayTimeDuration-is-in
<i><a href="IIC152Request.xml">Request</a>,<a href="IIC152Policy.xml">Policy</a>,<a href="IIC152Response.xml">Response</a></i>
<li>Case: function:dayTimeDuration-bag
<i><a href="IIC153Request.xml">Request</a>,<a href="IIC153Policy.xml">Policy</a>,<a href="IIC153Response.xml">Response</a></i>
<li>Case: function:yearMonthDuration-one-and-only
<i><a href="IIC154Request.xml">Request</a>,<a href="IIC154Policy.xml">Policy</a>,<a href="IIC154Response.xml">Response</a></i>
<li>Case: function:yearMonthDuration-bag-size
<i><a href="IIC155Request.xml">Request</a>,<a href="IIC155Policy.xml">Policy</a>,<a href="IIC155Response.xml">Response</a></i>
<li>Case: function:yearMonthDuration-is-in
<i><a href="IIC156Request.xml">Request</a>,<a href="IIC156Policy.xml">Policy</a>,<a href="IIC156Response.xml">Response</a></i>