Novell Doc: Identity Manager 3.5.1 DTD Reference

Remarks

Operator	Returns true when...
available	The named entitlement is available and granted in either the current operation or the Identity Vault data store.
changing	The current operation contains a change (grant or revoke) of the named entitlement.
changing-from	The current operation contains a change that revokes a value of the named entitlement that has a value that equals the content of <if-entitlement> when compared using the specified comparison mode. Supports variable expansion.
changing-to	The current operation contains a change that grants a value of the named entitlement that has a value that equals the content of <if-entitlement> when compared using the specified comparison mode. Supports variable expansion.
equal	The named entitlement is available and granted in either the current operation or the Identity Vault data store and has a value that equals the content of <if-entitlement> when compared using the specified comparison mode. Supports variable expansion.
lt	The named entitlement is available and granted in either the current operation or the Identity Vault data store and has a value that is less than the content of the condition when compared using the specified comparison mode. Supports variable expansion.
gt	The named entitlement is available and granted in either the current operation or the Identity Vault data store and has a value that is greater than the content of the condition when compared using the specified comparison mode. Supports variable expansion.
not-available	Available returns false.
not-changing	Changing returns false
not-changing-from	Changing-from returns false.
not-changing-to	Changing-to returns false.
not-equal	Equal returns false.
not-lt	Less than returns false.
not-gt	Greater than returns false.

Example

<if-entitlement op="available" name="notes-group"/><if-entitlement op="changing" name="notes-group"/><if-entitlement op="changing-from"name="notes-group"/>Sales</if-entitlement><if-entitlement op="changing-to"name="notes-group"/>Sales</if-entitlement><if-entitlement op="equal" mode="nocase"name="notes-group">Sales</if-entitlement>

Allowed Content

#PCDATA

Attributes

Attribute	Possible Values	Default Value
disabled	true \| false True if this element is disabled.	false
mode	case \| nocase \| regex \| src-dn \| dest-dn \| numeric \| octet Comparison mode if op=“equal” or op=“not-equal” or op=“changing-from” or op=“changing-to”.	nocase
name	CDATA Name of the entitlement. Supports variable expansion.	#REQUIRED
notrace	t rue \| false True if this element should not be traced during execution of the policy.	false
op	available \| changing \| changing-from \| changing-to \| equal \| lt \| gt \| not-available \| not-changing \| not-changing-from \| not-changing-to \| not-equal \| not-lt \| not-gt Test operator.	#REQUIRED

Content Rule

( #PCDATA )

Parent Elements

Element	Description
and	Logical conjunction.
or	Logical disjunction.