Margrave | download | documentation | examples | help | more information

XACML Policies
CodeA.zip (Pol_1, Pol_2, Pol_3)
CodeB.zip (Pol_4)
CodeC.zip (Pol_5)
CodeD.zip (Pol_6, Pol_7)

Margrave Queries
verification.scm verification.txt the property verification example of section 3.1.
change.scm change.txt the change impact example of section 3.2.


These files correspond to the example of section 3. They consist of two Scheme code files, which hold Margrave queries, and four directories, each of which holds a policy written in XACML.

The Margrave files are:
verification.scm: The Margrave queries that check the properties of the verification example of section 3.1.
change.scm: The Margrave queries to perform the change impact analysis of section 3.2.

Since some the seven policies described in section 3 differ in the environment constraints in place, but not the actual XACML code, there are only four XACML policies. The XACML code correspond to the examples as follows:
- Pol_1 is CodeA.zip
- Pol_2 is also CodeA.zip (with the singleton constraints in place).
- Pol_3 is also CodeA.zip (with the singleton constraints and the 1st separation-of-duty [SoD] constraint [no student-faculty] in place).
- Pol_4 is CodeB.zip (with singleton and the 1st SoD constraints in place).
- Pol_5 is CodeC.zip (with singleton and the 1st SoD constraints in place).
- Pol_6 is CodeD.zip (with singleton and the 1st SoD constraints in place).
- Pol_7 is CodeD.zip (with singleton and both SoD constraints in place).

In each XACML code directory, a XACML file RPSlist.xml exists. This file contains the base policy (start here). These files are written in the style of the XACML Profile for Role Based Access Control. Each RPS file targets requests for a single role. Each PPS file gives permissions to that role and any role that inherits permissions from that role.