Performs a test on entitlements of the current object in either the current operation or the Identity Vault data store.
Operator |
Returns true when... |
---|---|
available |
The named entitlement is available and granted in either the current operation or the Identity Vault data store. |
changing |
The current operation contains a change (grant or revoke) of the named entitlement. |
changing-from |
The current operation contains a change that revokes a value of the named entitlement that has a value that equals the content of <if-entitlement> when compared using the specified comparison mode. Supports variable expansion. |
changing-to |
The current operation contains a change that grants a value of the named entitlement that has a value that equals the content of <if-entitlement> when compared using the specified comparison mode. Supports variable expansion. |
equal |
The named entitlement is available and granted in either the current operation or the Identity Vault data store and has a value that equals the content of <if-entitlement> when compared using the specified comparison mode. Supports variable expansion. |
lt |
The named entitlement is available and granted in either the current operation or the Identity Vault data store and has a value that is less than the content of the condition when compared using the specified comparison mode. Supports variable expansion. |
gt |
The named entitlement is available and granted in either the current operation or the Identity Vault data store and has a value that is greater than the content of the condition when compared using the specified comparison mode. Supports variable expansion. |
not-available |
Available returns false. |
not-changing |
Changing returns false |
not-changing-from |
Changing-from returns false. |
not-changing-to |
Changing-to returns false. |
not-equal |
Equal returns false. |
not-lt |
Less than returns false. |
not-gt |
Greater than returns false. |
<if-entitlement op="available" name="notes-group"/> <if-entitlement op="changing" name="notes-group"/> <if-entitlement op="changing-from" name="notes-group"/>Sales</if-entitlement> <if-entitlement op="changing-to" name="notes-group"/>Sales</if-entitlement> <if-entitlement op="equal" mode="nocase" name="notes-group">Sales</if-entitlement>
#PCDATA
Attribute |
Possible Values |
Default Value |
---|---|---|
disabled |
true | false True if this element is disabled. |
false |
mode |
case | nocase | regex | src-dn | dest-dn | numeric | octet Comparison mode if op=“equal” or op=“not-equal” or op=“changing-from” or op=“changing-to”. |
nocase |
name |
CDATA Name of the entitlement. Supports variable expansion. |
#REQUIRED |
notrace |
t rue | false True if this element should not be traced during execution of the policy. |
false |
op |
available | changing | changing-from | changing-to | equal | lt | gt | not-available | not-changing | not-changing-from | not-changing-to | not-equal | not-lt | not-gt Test operator. |
#REQUIRED |
( #PCDATA )