2.3 Defining Individual Rules within a Policy

Rules are defined in the Rule Builder window of the Policy Builder. To access the Rule Builder window:

  1. Click the library that contains the policy of the rules you want to define.

  2. Click on the policy.

  3. Click Append New Rule.

Figure 2-1 Rule Builder Window of the Policy Builder

The Rule Builder interface enables you to quickly create and modify rules using intelligent drop-down menus.

In the Rule Builder, you define a set of conditions that must be met before a defined action occurs.

For example, if you need to create a rule that disallows any new objects from being added to your environment, you might define this rule to indicate that when an add operation occurs, veto the operation.

To implement this logic in the Rule Builder, you could select the following condition:

Figure 2-2 Move User Condition in the Rule Builder Interface

And the following action:

Figure 2-3 Veto Action in the Rule Builder Interface

See Section 9.0, Conditions and Section 10.0, Actions for a detailed reference on the conditions and actions available in the Rule Builder.

Tips

To create more complex conditions, you can join conditions and groups of conditions with and/or statements. You can modify the way these are joined by selecting the condition structure:

Figure 2-4 Condition Structure Radio Buttons

  • Browse: Click the Browse icon icon to see a list of values for a field. In the example above, this icon opens a list of valid class names.

  • Argument Builder: Click the Argument Builder icon icon to use the Argument Builder interface to construct an argument.

  • Enable/Disable Policy, Rule, Condition or Action: Click the Enable icon icon to disable a policy, rule, condition, or action. Click the Disable icon icon to re-enable it.

  • Enable/Disable Policy Tracing: Click the Enable trace icon icon to disable tracing on the policy. Click the Disable trace icon icon to re-enable tracing of the policy.

  • Comment: Click the Information icon icon to add a comment to a policy or rule. Comments are stored directly on the policy or rule, and can be as long as necessary.

  • Cut/Copy/Paste: Use the Cut/Copy/Paste icons Cut/Copy/Paste icons to use the Policy Builder clipboard. The Paste icon is disabled if the current content on the clipboard is invalid at that location.

  • Conditions: Use the Add, Remove, and Position icons icons to add, remove, and position conditions.

  • Add Condition Groups: Use the Append Condition Group icon button to add condition groups.

  • Remove and Position Condition Groups: Use the Remove and Position icons icons to remove and position condition groups.