DirXMLScript DTD: token-map element

token-map

<token-map> maps the result of the enclosed tokens from the values specified by the src column to the dest column in the the mapping table specified by table. If the values from multiple source columns are to be mapped to a dest column, <token-map-source-col> can to be used inside <token-map> with the details of multiple source dolumns. The type attribute can be used to specify if all the values of the source columns have to be matched or the value of any of source column can be matched. Refer examples below.

The table attribute should be the slash form DN of the DirXML-Resource object containing the mapping table to be used. The DN may be relative to the including policy.

If this token is evaluated in a context where a node-set result is expected and multiple rows are matched by the value being mapped, then a node-set is returned that contains the values from the destination column of each matching row. Otherwise only the value from the first matching row is returned.

If no rows are matched by the value being mapped and a non-empty value for default-value is provided, then the token returns the value of default-value, otherwise it returns the empty string if being evaluated in a context that is expecting a string, or an empty node-set if evaluated in a context that is expecting a node-set.

Example

<token-map dest="code" source="dept" table="./Department Table">
  <token-op-attr name="OU"/>
</token-map>

<token-map dest="resourceDN" source="entitlementName" table="..\EntitlementLLIDMapping" type="AND">
  <token-local-variable="entName"/>
  <token-map-source-col name="LLID">
    <token-local-variable name="_llid_"/>
  </token-map-source-col>
</token-map>

1. Allowed Content

token-map-source-col: used in token-map to have multiple source columns
token-added-entitlement: the value(s) of an entitlement granted in the current operation
token-association: the association value from the current operation
token-attr: the value(s) of an attribute in the current operation or current object in the source datastore
token-base64-decode: decode base64 data into a string
token-base64-encode: encode a string into base64 data
token-char: a unicode character
token-class-name: the object class name from the current operation
token-convert-time: convert a date/time from one format to another
token-dest-attr: the value(s) of an attribute of current object in the destination datastore
token-dest-dn: a value derived from the destination DN from the current operation
token-dest-name: the unqualified RDN derived from destination DN from the current operation
token-document: read an XML document
token-entitlement: the value(s) of a granted entitlement of the current object
token-escape-for-dest-dn: convert a string for use in a destination DN
token-escape-for-src-dn: convert a string for use in a source DN
token-generate-password: generate a random password
token-global-variable: the value of a global variable
token-join: join a node-set into a string
token-json-object: constructs a JSON string
token-json-array: constructs a JSON array
token-local-variable: the value of a local variable
token-lower-case: convert a string to lower case
token-named-password: the value of the named password
token-map: map a string through a mapping table
token-op-attr: the value(s) of an attribute in the current operation
token-op-property: the value of an operation property
token-operation: the name of the current operation
token-parse-dn: parse and/or convert a DN
token-password: the value of the password in current operation
token-query: query the source or destination datastore
token-removed-attr: the value(s) of an attribute removed in the current operation
token-removed-entitlement: the value(s) of an entitlement revoked in the current operation
token-replace-all: replace all instances of a substring within a string
token-replace-first: replace a single instance of a substring within a string
token-resolve: resolve a DN to an association key or an association key to a DN.
token-split: split a string into a node-set
token-src-attr: the value(s) of an attribute of current object in the source datastore
token-src-dn: a value derived from the source DN from the current operation
token-src-name: the unqualified RDN derived from source DN from the current operation
token-substring: substring of a string
token-text: constant text
token-time: the current date/time
token-unique-name: a generated unique name
token-unmatched-src-dn: a DN relative to the one matched by if-src-dn
token-upper-case: convert a string to upper case
token-xml-parse: parse XML
token-xml-serialize: serialize XML
token-xpath: the result of an XPATH expression

2. Attributes

Attribute Value(s) Default Value

default-value CDATA

default value for the destination column
supports variable expansion
#IMPLIED

dest CDATA

name of the destination column
supports variable expansion
#REQUIRED

notrace true | false

trueif this element should not be traced during execution of policy
false

source CDATA

name of the source column
supports variable expansion
#REQUIRED

table CDATA

slash form DN of a DirXML-Resource object containing the mapping table
may be relative to the including policy
supports variable expansion
#REQUIRED

type AND | OR

To decide whether all source column values are to be matched or any value can be matched

AND

Attribute	Value(s)	Default Value
default-value	CDATA default value for the destination column supports variable expansion	#IMPLIED
dest	CDATA name of the destination column supports variable expansion	#REQUIRED
notrace	true \| false trueif this element should not be traced during execution of policy	false
source	CDATA name of the source column supports variable expansion	#REQUIRED
table	CDATA slash form DN of a DirXML-Resource object containing the mapping table may be relative to the including policy supports variable expansion	#REQUIRED
type	AND \| OR To decide whether all source column values are to be matched or any value can be matched	AND

3. Content Rule

( token-map-source-col + | ( token-added-entitlement | token-association | token-attr | token-base64-decode | token-base64-encode | token-char | token-class-name | token-convert-time | token-dest-attr | token-dest-dn | token-dest-name | token-document | token-entitlement | token-escape-for-dest-dn | token-escape-for-src-dn | token-generate-password | token-global-variable | token-join | token-json-object | token-json-array | token-local-variable | token-lower-case | token-named-password | token-map | token-op-attr | token-op-property | token-operation | token-parse-dn | token-password | token-query | token-removed-attr | token-removed-entitlement | token-replace-all | token-replace-first | token-resolve | token-split | token-src-attr | token-src-dn | token-src-name | token-substring | token-text | token-time | token-unique-name | token-unmatched-src-dn | token-upper-case | token-xml-parse | token-xml-serialize | token-xpath ) * )

4. Parent Elements

arg-association: association argument
arg-component: component argument
arg-dn: DN argument
arg-node-set: node set argument
arg-password: password argument
arg-string: string argument
arg-value: value argument
token-base64-decode: decode base64 data into a string
token-base64-encode: encode a string into base64 data
token-convert-time: convert a date/time from one format to another
token-escape-for-dest-dn: convert a string for use in a destination DN
token-escape-for-src-dn: convert a string for use in a source DN
token-join: join a node-set into a string
token-lower-case: convert a string to lower case
token-map: map a string through a mapping table
token-map-source-col: used in token-map to have multiple source columns
token-parse-dn: parse and/or convert a DN
token-replace-all: replace all instances of a substring within a string
token-replace-first: replace a single instance of a substring within a string
token-split: split a string into a node-set
token-substring: substring of a string
token-upper-case: convert a string to upper case
token-xml-parse: parse XML
token-xml-serialize: serialize XML