summaryrefslogtreecommitdiffstats
path: root/xml/acls-2.0.rng
blob: 0fe6eed96e089a48514155382fe203cf35bd2285 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
<?xml version="1.0" encoding="UTF-8"?>
<grammar xmlns="http://relaxng.org/ns/structure/1.0" 
         datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes">
  <start>
    <optional>
      <ref name="element-acls"/>
    </optional>
  </start>

  <define name="element-acls">
    <element name="acls">
      <zeroOrMore>
        <choice>
          <element name="acl_target">
            <attribute name="id"><text/></attribute>
            <zeroOrMore>
              <element name="role">
                <attribute name="id"><data type="IDREF"/></attribute>
              </element>
            </zeroOrMore>
          </element>
          <element name="acl_group">
            <!-- Here 'id' is the name of a unix group -->
            <attribute name="id"><data type="ID"/></attribute>
            <zeroOrMore>
              <element name="role">
                <attribute name="id"><data type="IDREF"/></attribute>
              </element>
            </zeroOrMore>
          </element>
          <element name="acl_role">
            <attribute name="id"><data type="ID"/></attribute>
            <optional>
              <attribute name="description"><text/></attribute>
            </optional>
            <zeroOrMore>
              <ref name="element-permission"/>
            </zeroOrMore>
          </element>
        </choice>
      </zeroOrMore>
    </element>
  </define>

  <define name="element-permission">
    <element name="acl_permission">
      <attribute name="id"><data type="ID"/></attribute>

      <attribute name="kind">
        <choice>
          <value>read</value>
          <value>write</value>
          <value>deny</value>
        </choice>
      </attribute>

      <choice>
        <attribute name="xpath"><text/></attribute>
        <!-- reference is already sufficiently specific without 'object-type' --> 
        <attribute name="reference"><data type="IDREF"/></attribute>
        <group>
          <!-- Use 'object-type' to avoid conflicting with the 'tag' configuration concept -->
          <attribute name="object-type"><text/></attribute>
          <optional>
            <!-- 
                 does not make sense with anything other than object-type
                 xpath and reference are already sufficiently specific
            -->
            <attribute name="attribute"><text/></attribute>
          </optional>
        </group>
      </choice>

      <optional>
        <attribute name="description"><text/></attribute>
      </optional>
    </element>
  </define>

</grammar>