blob: 48bcdffe34738e0865afb4be9ba80260ff2d76cb (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
|
<?xml version="1.0" encoding="UTF-8"?>
<grammar xmlns="http://relaxng.org/ns/structure/1.0"
datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes">
<start>
<optional>
<ref name="element-acls"/>
</optional>
</start>
<define name="element-acls">
<element name="acls">
<zeroOrMore>
<choice>
<element name="acl_target">
<attribute name="id"><text/></attribute>
<optional>
<attribute name="name"><text/></attribute>
</optional>
<zeroOrMore>
<element name="role">
<attribute name="id"><data type="IDREF"/></attribute>
</element>
</zeroOrMore>
</element>
<element name="acl_group">
<!-- Here 'id' is the name of a unix group -->
<attribute name="id"><data type="ID"/></attribute>
<optional>
<attribute name="name"><text/></attribute>
</optional>
<zeroOrMore>
<element name="role">
<attribute name="id"><data type="IDREF"/></attribute>
</element>
</zeroOrMore>
</element>
<element name="acl_role">
<attribute name="id"><data type="ID"/></attribute>
<optional>
<attribute name="description"><text/></attribute>
</optional>
<zeroOrMore>
<ref name="element-permission"/>
</zeroOrMore>
</element>
</choice>
</zeroOrMore>
</element>
</define>
<define name="element-permission">
<element name="acl_permission">
<attribute name="id"><data type="ID"/></attribute>
<attribute name="kind">
<choice>
<value>read</value>
<value>write</value>
<value>deny</value>
</choice>
</attribute>
<choice>
<attribute name="xpath"><text/></attribute>
<!-- reference is already sufficiently specific without 'object-type' -->
<attribute name="reference"><data type="IDREF"/></attribute>
<group>
<!-- Use 'object-type' to avoid conflicting with the 'tag' configuration concept -->
<attribute name="object-type"><text/></attribute>
<optional>
<!--
does not make sense with anything other than object-type
xpath and reference are already sufficiently specific
-->
<attribute name="attribute"><text/></attribute>
</optional>
</group>
</choice>
<optional>
<attribute name="description"><text/></attribute>
</optional>
</element>
</define>
</grammar>
|