defaultDelegationPoliciesForAmSDK.xml revision 49e2c7ae84fa30c95b6f93d0f3c3e868dcdf52f3
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync<?xml version="1.0" encoding="ISO-8859-1"?>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync<!--
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync Copyright (c) 2006 Sun Microsystems Inc. All Rights Reserved
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync The contents of this file are subject to the terms
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync of the Common Development and Distribution License
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync (the License). You may not use this file except in
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync compliance with the License.
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync You can obtain a copy of the License at
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync https://opensso.dev.java.net/public/CDDLv1.0.html or
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync opensso/legal/CDDLv1.0.txt
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync See the License for the specific language governing
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync permission and limitations under the License.
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync When distributing Covered Code, include this CDDL
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync Header Notice in each file and include the License file
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync at opensso/legal/CDDLv1.0.txt.
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync If applicable, add the following below the CDDL Header,
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync with the fields enclosed by brackets [] replaced by
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync your own identifying information:
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync "Portions Copyrighted [year] [name of copyright owner]"
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync $Id: defaultDelegationPoliciesForAmSDK.xml,v 1.3 2009/08/19 05:40:40 veiming Exp $
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync-->
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync<!DOCTYPE Policies
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync PUBLIC "-//iPlanet//OpenSSO 2005Q4 Admin CLI DTD//EN" "jar://com/sun/identity/policy/policyAdmin.dtd">
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync<Policies>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync<Policy name="@SM_ROOT_SUFFIX_HAT@^^PolicyAdmin1"
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync referralPolicy="false" active="true" >
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Rule name="delegation-rule1">
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <ServiceName name="sunAMDelegationService" />
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <ResourceName name="sms://*@SM_CONFIG_ROOT_SUFFIX@/iPlanetAMPolicy*Service/*" />
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Attribute name="MODIFY" />
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Value>allow</Value>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Attribute name="DELEGATE" />
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Value>allow</Value>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Attribute name="READ" />
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Value>allow</Value>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </Rule>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Subjects name="Subjects" description="">
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Subject name="delegation-subject" type="AMIdentitySubject" includeType="inclusive">
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Attribute name="Values"/>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Value>id=Top-level Policy Admin Role,ou=role,@SM_CONFIG_ROOT_SUFFIX@,amsdkdn=cn=Top-level Policy Admin Role,@ROOT_SUFFIX@</Value>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </Subject>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </Subjects>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync</Policy>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync<Policy name="@SM_ROOT_SUFFIX_HAT@^^PolicyAdmin2"
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync referralPolicy="false" active="true" >
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Rule name="delegation-rule1">
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <ServiceName name="sunAMDelegationService" />
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <ResourceName name="sms://*@SM_CONFIG_ROOT_SUFFIX@/sunAMRealmService/*" />
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Attribute name="READ" />
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Value>allow</Value>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </Rule>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Subjects name="Subjects" description="">
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Subject name="delegation-subject" type="AMIdentitySubject" includeType="inclusive">
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Attribute name="Values"/>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Value>id=Top-level Policy Admin Role,ou=role,@SM_CONFIG_ROOT_SUFFIX@,amsdkdn=cn=Top-level Policy Admin Role,@ROOT_SUFFIX@</Value>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </Subject>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </Subjects>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync</Policy>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync<Policy name="@SM_ROOT_SUFFIX_HAT@^^PolicyAdmin3"
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync referralPolicy="false" active="true" >
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Rule name="delegation-rule1">
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <ServiceName name="sunAMDelegationService" />
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <ResourceName name="sms://*@SM_CONFIG_ROOT_SUFFIX@/sunIdentityRepositoryService/*" />
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Attribute name="READ" />
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Value>allow</Value>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </Rule>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Subjects name="Subjects" description="">
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Subject name="delegation-subject" type="AMIdentitySubject" includeType="inclusive">
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Attribute name="Values"/>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync <Value>id=Top-level Policy Admin Role,ou=role,@SM_CONFIG_ROOT_SUFFIX@,amsdkdn=cn=Top-level Policy Admin Role,@ROOT_SUFFIX@</Value>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </AttributeValuePair>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </Subject>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync </Subjects>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync</Policy>
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync
3331475701a5b12f98b3cfea07d5dca60072530fvboxsync</Policies>