entitlement.xml revision 74478f22726009d623b143d2b017f2e3a0884916
0N/A<?xml version="1.0" encoding="UTF-8"?>
1879N/A
0N/A<!--
0N/A DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
0N/A
0N/A Copyright (c) 2009 Sun Microsystems Inc. All Rights Reserved
0N/A
0N/A The contents of this file are subject to the terms
0N/A of the Common Development and Distribution License
0N/A (the License). You may not use this file except in
0N/A compliance with the License.
0N/A
0N/A You can obtain a copy of the License at
0N/A https://opensso.dev.java.net/public/CDDLv1.0.html or
0N/A opensso/legal/CDDLv1.0.txt
0N/A See the License for the specific language governing
0N/A permission and limitations under the License.
0N/A
1472N/A When distributing Covered Code, include this CDDL
1472N/A Header Notice in each file and include the License file
1472N/A at opensso/legal/CDDLv1.0.txt.
0N/A If applicable, add the following below the CDDL Header,
0N/A with the fields enclosed by brackets [] replaced by
0N/A your own identifying information:
1879N/A "Portions Copyrighted [year] [name of copyright owner]"
1879N/A
1879N/A $Id: entitlement.xml,v 1.9 2010/01/07 00:19:12 veiming Exp $
1879N/A
1879N/A Portions copyright 2011-2014 ForgeRock AS.
1879N/A-->
1879N/A
1879N/A<!DOCTYPE ServicesConfiguration
1879N/A PUBLIC "=//iPlanet//Service Management Services (SMS) 1.0 DTD//EN"
1879N/A "jar://com/sun/identity/sm/sms.dtd">
1879N/A
0N/A<ServicesConfiguration>
0N/A <Service name="sunEntitlementService" version="1.0">
0N/A <Schema i18nFileName="" revisionNumber="20">
0N/A <Global>
0N/A <AttributeSchema name="usenewconsole"
0N/A type="single"
0N/A syntax="string"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value></Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A <AttributeSchema name="migratedtoentitlementservice"
0N/A type="single"
0N/A syntax="boolean"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>true</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A <AttributeSchema name="xacml-privilege-enabled"
0N/A type="single"
0N/A syntax="boolean"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>false</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A <AttributeSchema name="evalThreadSize"
0N/A type="single"
0N/A syntax="number_range"
0N/A rangeStart="0" rangeEnd="200"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>10</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A <AttributeSchema name="searchThreadSize"
0N/A type="single"
0N/A syntax="number_range"
0N/A rangeStart="0" rangeEnd="200"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>0</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A <AttributeSchema name="policyCacheSize"
0N/A type="single"
0N/A syntax="number_range"
0N/A rangeStart="0" rangeEnd="2147483647"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>100000</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A <AttributeSchema name="indexCacheSize"
0N/A type="single"
0N/A syntax="number_range"
0N/A rangeStart="0" rangeEnd="2147483647"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>100000</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A
0N/A <!-- entitlement notification, Connection timeout in millisec,
0N/A max 5 mins -->
0N/A <AttributeSchema name="entitlement-notifier-conn-timeout"
0N/A type="single"
0N/A syntax="number_range"
0N/A rangeStart="0" rangeEnd="300000"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>1000</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A <AttributeSchema name="entitlement-notifier-retries"
0N/A type="single"
0N/A syntax="number_range"
0N/A rangeStart="0" rangeEnd="50"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>3</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A <!-- duration between retries in millisec, max 5 mins -->
0N/A <AttributeSchema name="entitlement-notifier-duration-between-retries"
0N/A type="single"
0N/A syntax="number_range"
0N/A rangeStart="0" rangeEnd="300000"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>1000</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A
0N/A <!-- Privilege change notification
0N/A Connection timeout in millisec, max 5 mins -->
0N/A <AttributeSchema name="privilege-notifier-conn-timeout"
0N/A type="single"
0N/A syntax="number_range"
0N/A rangeStart="0" rangeEnd="300000"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>1000</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A <AttributeSchema name="privilege-notifier-retries"
0N/A type="single"
0N/A syntax="number_range"
0N/A rangeStart="0" rangeEnd="50"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>3</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A <!-- duration between retries in millisec, max 5 mins -->
0N/A <AttributeSchema name="privilege-notifier-duration-between-retries"
0N/A type="single"
0N/A syntax="number_range"
0N/A rangeStart="0" rangeEnd="300000"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>3000</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A <AttributeSchema name="privilege-notifier-threadpool-size"
0N/A type="single"
0N/A syntax="number_range"
0N/A rangeStart="0" rangeEnd="20"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>5</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A <AttributeSchema name="network-monitor-enabled"
0N/A type="single"
0N/A syntax="boolean"
0N/A i18nKey="">
0N/A <DefaultValues>
0N/A <Value>false</Value>
0N/A </DefaultValues>
0N/A </AttributeSchema>
0N/A
0N/A
0N/A <AttributeSchema name="listeners"
0N/A type="list"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <SubSchema name="applicationTypes" inheritance="multiple">
0N/A <SubSchema name="applicationType" inheritance="multiple">
0N/A <AttributeSchema name="applicationClassName"
0N/A type="single"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="actions"
0N/A type="list"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="searchIndexImpl"
0N/A type="single"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="saveIndexImpl"
0N/A type="single"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="resourceComparator"
0N/A type="single"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="nonBooleanActionValues"
0N/A type="list"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A </SubSchema>
0N/A </SubSchema>
0N/A </Global>
0N/A <Organization>
0N/A <SubSchema name="applications" inheritance="multiple">
0N/A <SubSchema name="application" inheritance="multiple">
0N/A <AttributeSchema name="applicationType"
0N/A type="single"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="description"
0N/A type="single"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="actions"
0N/A type="list"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="resources"
0N/A type="list"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="subjects"
0N/A type="list"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="conditions"
0N/A type="list"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="entitlementCombiner"
0N/A type="single"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="searchIndexImpl"
0N/A type="single"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="saveIndexImpl"
0N/A type="single"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="resourceComparator"
0N/A type="single"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="subjectAttributeNames"
0N/A type="list"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="meta"
0N/A type="list"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A </SubSchema>
0N/A </SubSchema>
0N/A <SubSchema name="subjectAttributesCollectors" inheritance="multiple">
0N/A <SubSchema name="OpenSSOSubjectAttributesCollector" inheritance="multiple">
0N/A <AttributeSchema name="class"
0N/A type="single"
0N/A syntax="string"
0N/A i18nKey="" />
0N/A <AttributeSchema name="groupMembershipSearchIndexEnabled"
0N/A type="single"
0N/A syntax="boolean"
0N/A i18nKey="" />
0N/A </SubSchema>
0N/A </SubSchema>
0N/A </Organization>
0N/A </Schema>
0N/A <Configuration>
0N/A <GlobalConfiguration>
0N/A <SubConfiguration name="applicationTypes" id="applicationTypes">
0N/A <SubConfiguration name="iPlanetAMWebAgentService"
0N/A id="applicationType">
0N/A <AttributeValuePair>
0N/A <Attribute name="actions" />
0N/A <Value>GET=true</Value>
0N/A <Value>POST=true</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="searchIndexImpl" />
0N/A <Value>org.forgerock.openam.entitlement.indextree.TreeSearchIndex</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="saveIndexImpl" />
0N/A <Value>org.forgerock.openam.entitlement.indextree.TreeSaveIndex</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="resourceComparator" />
0N/A <Value>com.sun.identity.entitlement.URLResourceName</Value>
0N/A </AttributeValuePair>
0N/A </SubConfiguration>
0N/A <SubConfiguration name="crestPolicyService" id="applicationType">
0N/A <AttributeValuePair>
0N/A <Attribute name="actions" />
0N/A <Value>CREATE=true</Value>
0N/A <Value>READ=true</Value>
0N/A <Value>UPDATE=true</Value>
0N/A <Value>DELETE=true</Value>
0N/A <Value>PATCH=true</Value>
0N/A <Value>ACTION=true</Value>
0N/A <Value>QUERY=true</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="searchIndexImpl" />
0N/A <Value>org.forgerock.openam.entitlement.indextree.TreeSearchIndex</Value>
0N/A </AttributeValuePair>
1409N/A <AttributeValuePair>
0N/A <Attribute name="saveIndexImpl" />
0N/A <Value>org.forgerock.openam.entitlement.indextree.TreeSaveIndex</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="resourceComparator" />
0N/A <Value>com.sun.identity.entitlement.URLResourceName</Value>
0N/A </AttributeValuePair>
0N/A </SubConfiguration>
0N/A <SubConfiguration name="sunIdentityServerDiscoveryService"
0N/A id="applicationType">
0N/A <AttributeValuePair>
0N/A <Attribute name="actions" />
0N/A <Value>LOOKUP=true</Value>
0N/A <Value>UPDATE=true</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="searchIndexImpl" />
0N/A <Value>com.sun.identity.entitlement.util.ResourceNameSplitter</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="saveIndexImpl" />
0N/A <Value>com.sun.identity.entitlement.util.ResourceNameIndexGenerator</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="resourceComparator" />
0N/A <Value>com.sun.identity.entitlement.PrefixResourceName</Value>
0N/A </AttributeValuePair>
0N/A </SubConfiguration>
0N/A <SubConfiguration name="sunIdentityServerLibertyPPService"
0N/A id="applicationType">
0N/A <AttributeValuePair>
0N/A <Attribute name="actions" />
0N/A <Value>QUERY_allow=true</Value>
0N/A <Value>QUERY_deny=false</Value>
1080N/A <Value>QUERY_interactForValue=false</Value>
1080N/A <Value>QUERY_interactForConsent=false</Value>
1080N/A <Value>MODIFY_allow=true</Value>
1080N/A <Value>MODIFY_deny=false</Value>
1080N/A <Value>MODIFY_interactForValue=false</Value>
0N/A <Value>MODIFY_interactForConsent=false</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="nonBooleanActionValues" />
0N/A <Value>QUERY=deny,allow,interactForValue,interactForConsent</Value>
0N/A <Value>MODIFY=deny,allow,interactForValue,interactForConsent</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="searchIndexImpl" />
0N/A <Value>com.sun.identity.entitlement.util.ResourceNameSplitter</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="saveIndexImpl" />
0N/A <Value>com.sun.identity.entitlement.util.ResourceNameIndexGenerator</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="resourceComparator" />
0N/A <Value>com.sun.identity.entitlement.PrefixResourceName</Value>
0N/A </AttributeValuePair>
0N/A </SubConfiguration>
0N/A <SubConfiguration name="sunAMDelegationService"
0N/A id="applicationType">
0N/A <AttributeValuePair>
0N/A <Attribute name="actions" />
0N/A <Value>READ=true</Value>
0N/A <Value>MODIFY=true</Value>
0N/A <Value>DELEGATE=true</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="searchIndexImpl" />
0N/A <Value>com.sun.identity.entitlement.opensso.DelegationResourceNameSplitter</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="saveIndexImpl" />
0N/A <Value>com.sun.identity.entitlement.opensso.DelegationResourceNameIndexGenerator</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
113N/A <Attribute name="resourceComparator" />
113N/A <Value>com.sun.identity.entitlement.RegExResourceName</Value>
113N/A </AttributeValuePair>
113N/A </SubConfiguration>
0N/A <SubConfiguration name="openProvisioning"
0N/A id="applicationType">
1541N/A <AttributeValuePair>
1541N/A <Attribute name="actions" />
1541N/A <Value>CREATE=true</Value>
1541N/A <Value>READ=true</Value>
3910N/A <Value>UPDATE=true</Value>
3910N/A <Value>DELETE=true</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="searchIndexImpl" />
0N/A <Value>com.sun.identity.entitlement.util.ResourceNameSplitter</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="saveIndexImpl" />
0N/A <Value>com.sun.identity.entitlement.util.ResourceNameIndexGenerator</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="resourceComparator" />
0N/A <Value>com.sun.identity.entitlement.PrefixResourceName</Value>
0N/A </AttributeValuePair>
0N/A </SubConfiguration>
0N/A <SubConfiguration name="banking"
0N/A id="applicationType">
0N/A <AttributeValuePair>
0N/A <Attribute name="actions" />
0N/A <Value>TRANSFER=true</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="searchIndexImpl" />
0N/A <Value>com.sun.identity.entitlement.util.ResourceNameSplitter</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="saveIndexImpl" />
0N/A <Value>com.sun.identity.entitlement.util.ResourceNameIndexGenerator</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="resourceComparator" />
0N/A <Value>com.sun.identity.entitlement.ExactMatchResourceName</Value>
0N/A </AttributeValuePair>
0N/A </SubConfiguration>
0N/A <SubConfiguration name="webservices"
0N/A id="applicationType">
3910N/A <AttributeValuePair>
3910N/A <Attribute name="applicationClassName" />
0N/A <Value>com.sun.identity.entitlement.WebServiceApplication</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="searchIndexImpl" />
0N/A <Value>com.sun.identity.entitlement.util.ResourceNameSplitter</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="saveIndexImpl" />
0N/A <Value>com.sun.identity.entitlement.util.ResourceNameIndexGenerator</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="resourceComparator" />
0N/A <Value>com.sun.identity.entitlement.URLResourceName</Value>
73N/A </AttributeValuePair>
73N/A </SubConfiguration>
73N/A </SubConfiguration>
1541N/A </GlobalConfiguration>
73N/A <OrganizationConfiguration name="/">
73N/A <SubConfiguration name="registeredApplications"
73N/A id="applications">
3811N/A <SubConfiguration name="iPlanetAMWebAgentService"
3811N/A id="application">
3811N/A <AttributeValuePair>
3811N/A <Attribute name="applicationType" />
3811N/A <Value>iPlanetAMWebAgentService</Value>
3811N/A </AttributeValuePair>
3811N/A <AttributeValuePair>
3811N/A <Attribute name="resources" />
3811N/A <Value>http://*</Value>
3811N/A <Value>https://*</Value>
3811N/A </AttributeValuePair>
3811N/A <AttributeValuePair>
3811N/A <Attribute name="subjects" />
3811N/A <Value>com.sun.identity.admin.model.IdRepoGroupViewSubject</Value>
3811N/A <Value>com.sun.identity.admin.model.IdRepoRoleViewSubject</Value>
3811N/A <Value>com.sun.identity.admin.model.IdRepoUserViewSubject</Value>
3811N/A <Value>com.sun.identity.admin.model.VirtualViewSubject</Value>
3811N/A <Value>com.sun.identity.admin.model.AttributeViewSubject</Value>
3811N/A <Value>com.sun.identity.admin.model.OrViewSubject</Value>
851N/A <Value>com.sun.identity.admin.model.AndViewSubject</Value>
851N/A <Value>com.sun.identity.admin.model.NotViewSubject</Value>
113N/A </AttributeValuePair>
113N/A <AttributeValuePair>
113N/A <Attribute name="conditions" />
113N/A <!--<Value>com.sun.identity.admin.model.ActiveSessionTimeCondition</Value>-->
2292N/A <Value>dateRange</Value>
2442N/A <Value>daysOfWeek</Value>
2292N/A <Value>dnsName</Value>
2292N/A <Value>ipRange</Value>
2292N/A <Value>timeRange</Value>
2292N/A <Value>timezone</Value>
0N/A <Value>or</Value>
0N/A <Value>and</Value>
0N/A <Value>not</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="entitlementCombiner" />
0N/A <Value>com.sun.identity.entitlement.DenyOverride</Value>
0N/A </AttributeValuePair>
0N/A </SubConfiguration>
0N/A <SubConfiguration name="crestPolicyService" id="application">
0N/A <AttributeValuePair>
0N/A <Attribute name="applicationType" />
0N/A <Value>crestPolicyService</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="resources" />
0N/A <Value>http://*</Value>
0N/A <Value>https://*</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="subjects" />
0N/A <Value>com.sun.identity.admin.model.IdRepoGroupViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.IdRepoRoleViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.IdRepoUserViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.VirtualViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.AttributeViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.OrViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.AndViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.NotViewSubject</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="conditions" />
0N/A <Value>dateRange</Value>
0N/A <Value>daysOfWeek</Value>
0N/A <Value>dnsName</Value>
0N/A <Value>ipRange</Value>
0N/A <Value>timeRange</Value>
0N/A <Value>timezone</Value>
0N/A <Value>or</Value>
0N/A <Value>and</Value>
0N/A <Value>not</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="entitlementCombiner" />
0N/A <Value>com.sun.identity.entitlement.DenyOverride</Value>
0N/A </AttributeValuePair>
0N/A </SubConfiguration>
0N/A <SubConfiguration name="sunIdentityServerDiscoveryService"
0N/A id="application">
0N/A <AttributeValuePair>
0N/A <Attribute name="applicationType" />
0N/A <Value>sunIdentityServerDiscoveryService</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="resources" />
0N/A <Value>http://*</Value>
0N/A <Value>https://*</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="subjects" />
0N/A <Value>com.sun.identity.admin.model.IdRepoGroupViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.IdRepoRoleViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.IdRepoUserViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.VirtualViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.AttributeViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.OrViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.AndViewSubject</Value>
0N/A <Value>com.sun.identity.admin.model.NotViewSubject</Value>
0N/A </AttributeValuePair>
0N/A <AttributeValuePair>
0N/A <Attribute name="conditions" />
0N/A <!--<Value>com.sun.identity.admin.model.ActiveSessionTimeCondition</Value>-->
0N/A <Value>dateRange</Value>
0N/A <Value>daysOfWeek</Value>
0N/A <Value>dnsName</Value>
1879N/A <Value>ipRange</Value>
1879N/A <Value>timeRange</Value>
<Value>timezone</Value>
<Value>or</Value>
<Value>and</Value>
<Value>not</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="entitlementCombiner" />
<Value>com.sun.identity.entitlement.DenyOverride</Value>
</AttributeValuePair>
</SubConfiguration>
<SubConfiguration name="sunIdentityServerLibertyPPService"
id="application">
<AttributeValuePair>
<Attribute name="applicationType" />
<Value>sunIdentityServerLibertyPPService</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="resources" />
<Value>*</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="subjects" />
<Value>com.sun.identity.admin.model.IdRepoGroupViewSubject</Value>
<Value>com.sun.identity.admin.model.IdRepoRoleViewSubject</Value>
<Value>com.sun.identity.admin.model.IdRepoUserViewSubject</Value>
<Value>com.sun.identity.admin.model.VirtualViewSubject</Value>
<Value>com.sun.identity.admin.model.AttributeViewSubject</Value>
<Value>com.sun.identity.admin.model.OrViewSubject</Value>
<Value>com.sun.identity.admin.model.AndViewSubject</Value>
<Value>com.sun.identity.admin.model.NotViewSubject</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="conditions" />
<!--<Value>com.sun.identity.admin.model.ActiveSessionTimeCondition</Value>-->
<Value>dateRange</Value>
<Value>daysOfWeek</Value>
<Value>dnsName</Value>
<Value>ipRange</Value>
<Value>timeRange</Value>
<Value>timezone</Value>
<Value>or</Value>
<Value>and</Value>
<Value>not</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="entitlementCombiner" />
<Value>com.sun.identity.entitlement.DenyOverride</Value>
</AttributeValuePair>
</SubConfiguration>
<SubConfiguration name="sunAMDelegationService"
id="application">
<AttributeValuePair>
<Attribute name="applicationType" />
<Value>sunAMDelegationService</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="resources" />
<Value>sms://*</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="subjects" />
<Value>com.sun.identity.admin.model.IdRepoUserViewSubject</Value>
<Value>com.sun.identity.admin.model.IdRepoGroupViewSubject</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="entitlementCombiner" />
<Value>com.sun.identity.entitlement.DenyOverride</Value>
</AttributeValuePair>
</SubConfiguration>
<SubConfiguration name="openProvisioning"
id="application">
<AttributeValuePair>
<Attribute name="applicationType" />
<Value>openProvisioning</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="resources" />
<Value>/*</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="entitlementCombiner" />
<Value>com.sun.identity.entitlement.DenyOverride</Value>
</AttributeValuePair>
</SubConfiguration>
<SubConfiguration name="paycheck"
id="application">
<AttributeValuePair>
<Attribute name="applicationType" />
<Value>iPlanetAMWebAgentService</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="resources" />
<Value>http://paycheck.sun.com:8081/*</Value>
<Value>http://paycheck.sun.com:8081/*/private</Value>
<Value>http://paycheck.sun.com:8081/*/users/*</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="subjects" />
<Value>com.sun.identity.admin.model.IdRepoGroupViewSubject</Value>
<Value>com.sun.identity.admin.model.IdRepoRoleViewSubject</Value>
<Value>com.sun.identity.admin.model.IdRepoUserViewSubject</Value>
<Value>com.sun.identity.admin.model.VirtualViewSubject</Value>
<Value>com.sun.identity.admin.model.OrViewSubject</Value>
<Value>com.sun.identity.admin.model.AndViewSubject</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="conditions" />
<Value>dnsName</Value>
<Value>ipRange</Value>
<Value>or</Value>
<Value>and</Value>
<Value>not</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="entitlementCombiner" />
<Value>com.sun.identity.entitlement.DenyOverride</Value>
</AttributeValuePair>
</SubConfiguration>
<SubConfiguration name="calendar"
id="application">
<AttributeValuePair>
<Attribute name="applicationType" />
<Value>iPlanetAMWebAgentService</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="resources" />
<Value>http://calendar.sun.com/*</Value>
<Value>http://calendar.sun.com/my/*</Value>
<Value>http://calendar.sun.com/admin</Value>
<Value>http://calendar.sun.com/*/calendars?calId=*</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="subjects" />
<Value>com.sun.identity.admin.model.IdRepoGroupViewSubject</Value>
<Value>com.sun.identity.admin.model.IdRepoRoleViewSubject</Value>
<Value>com.sun.identity.admin.model.IdRepoUserViewSubject</Value>
<Value>com.sun.identity.admin.model.VirtualViewSubject</Value>
<Value>com.sun.identity.admin.model.OrViewSubject</Value>
<Value>com.sun.identity.admin.model.NotViewSubject</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="conditions" />
<Value>dateRange</Value>
<Value>daysOfWeek</Value>
<Value>timeRange</Value>
<Value>timezone</Value>
<Value>or</Value>
<Value>and</Value>
<Value>not</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="entitlementCombiner" />
<Value>com.sun.identity.entitlement.DenyOverride</Value>
</AttributeValuePair>
</SubConfiguration>
<SubConfiguration name="im"
id="application">
<AttributeValuePair>
<Attribute name="applicationType" />
<Value>iPlanetAMWebAgentService</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="resources" />
<Value>http://im.sun.com/register</Value>
<Value>http://im.sun.com/im.jnlp</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="subjects" />
<Value>com.sun.identity.admin.model.IdRepoGroupViewSubject</Value>
<Value>com.sun.identity.admin.model.IdRepoRoleViewSubject</Value>
<Value>com.sun.identity.admin.model.IdRepoUserViewSubject</Value>
<Value>com.sun.identity.admin.model.VirtualViewSubject</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="conditions" />
<Value>daysOfWeek</Value>
<Value>dnsName</Value>
<Value>ipRange</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="entitlementCombiner" />
<Value>com.sun.identity.entitlement.DenyOverride</Value>
</AttributeValuePair>
</SubConfiguration>
<SubConfiguration name="sunBank"
id="application">
<AttributeValuePair>
<Attribute name="applicationType" />
<Value>banking</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="resources" />
<Value>*</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="subjects" />
<Value>com.sun.identity.admin.model.BankingViewSubject</Value>
<Value>com.sun.identity.admin.model.VirtualViewSubject</Value>
<Value>com.sun.identity.admin.model.NotViewSubject</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="conditions" />
<Value>upperTransferLimit</Value>
<Value>lowerTransferLimit</Value>
<Value>anyTransferLimit</Value>
<Value>dateRange</Value>
<Value>daysOfWeek</Value>
<Value>timeRange</Value>
<Value>timezone</Value>
<Value>ipRange</Value>
<Value>or</Value>
<Value>and</Value>
<Value>not</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="entitlementCombiner" />
<Value>com.sun.identity.entitlement.DenyOverride</Value>
</AttributeValuePair>
</SubConfiguration>
</SubConfiguration>
<SubConfiguration name="subjectAttributesCollectors"
id="subjectAttributesCollectors">
<SubConfiguration name="OpenSSO"
id="OpenSSOSubjectAttributesCollector">
<AttributeValuePair>
<Attribute name="class" />
<Value>com.sun.identity.entitlement.opensso.OpenSSOSubjectAttributesCollector</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="groupMembershipSearchIndexEnabled" />
<Value>false</Value>
</AttributeValuePair>
</SubConfiguration>
</SubConfiguration>
</OrganizationConfiguration>
</Configuration>
</Service>
</ServicesConfiguration>