do-for-each

Repeats the actions specified by <arg-actions> once for each node in <arg-node-set> with the local variable current-node set to a node-set containing only that node. If the current-node is <entitlement-impl>, then the actions are also marked as if they were also enclosed in <do-implement-entitlement>.

Example

<do-for-each> 
   <arg-node-set> 
      <token-added-entitlement name="Group">
   </arg-node-set> 
   <arg-actions> 
      <do-add-dest-attr-value name="Member" class-name="Group"> 
         <arg-dn> 
            <token-local-variable name="current-node"/> 
         </arg-dn> 
         <arg-value type="dn"> 
            <token-dest-dn/> 
         </arg-value> 
     </do-add-dest-attr-value> 
   </arg-actions> 
</do-for-each>

Allowed Content

Element

Description

arg-node-set

Node set argument.

arg-actions

Actions argument.

Attributes

Attribute

Possible Values

Default Value

disabled

true | false

True if this element is disabled.

false

notrace

true | false

True if this element should not be traced during execution of the policy.

false

Content Rule

( arg-node-set , arg-actions )

Parent Elements

Element

Description

actions

Actions that are performed by a <rule>.

arg-actions

Actions argument.