if-attr

Performs a test on attribute values of the current object in either the current operation or the source data store.

Remarks

It can logically be thought of as equivalent to:

<or> <if-op-attr/> <if-src-attr/></or>

Operator

Returns true when...

available

There is a value available in either the current operation or the source data store for the specified attribute.

equal

There is a value available in either the current operation or the source data store for the specified attribute that equals the content of <if-attr> when compared using the specified comparison mode. If mode=“structured” then the content must be a set of <component> elements otherwise, it must be text. Supports variable expansion.

lt

There is a value available in either the current operation or the source data store for the specified attribute that is less than the content of the condition when compared using the specified comparison mode. Supports variable expansion.

gt

There is a value available in either the current operation or the source data store for the specified attribute that is greater than the content of the condition when compared using the specified comparison mode. Supports variable expansion.

not-available

Available returns false.

not-equal

Equal returns false.

not-lt

Less than returns false.

not-gt

Greater than returns false.

Example

<if-attr op="available" name="OU"/><if-attr op="equal" mode="nocase" name="OU">Sales</if-attr><if-attr op="equal" mode="structured" name="Language"> <component name="string">EN</component> <component name="string">JP</component></if-attr >

Allowed Content

#PCDATA

Element

Description

component

Value component.

Attributes

Attribute

Possible Values

Default Value

disabled

true | false

True if this element is disabled.

false

mode

case | nocase | regex | src-dn | dest-dn | numeric | octet | structured

Comparison mode if op implies a comparison.

nocase

name

CDATA

Name of the attribute.

#REQUIRED

notrace

true | false

True if this element should not be traced during execution of the policy.

false

op

available | equal | lt | gt | not-available | not-equal | not-lt | not-gt

Test operator.

#REQUIRED

Content Rule

( #PCDATA | component ) *

Parent Elements

Element

Description

and

Logical conjunction.

or

Logical disjunction.