ADI XML document model

The model constrains the authorization rules to function within a predetermined XML document format with the same top-level XML document element for all rules. The XML ADI is imported by the rules evaluator from credential attributes, from application context, or from other data sources. The XML ADI must be inserted into this XML document before authorization rules can use the data. Similarly to simplify the process of defining rules, the authorization rules must operate within the confines of the ADI XML model. The ADI XML model requires the XML document to contain the following top-level XML element. All target ADI for a particular rule evaluation is inserted in the top-level XML element. The XMLADI element is created automatically as part of the rule evaluation process by the authorization engine.

<XMLADI>
<!--   XML formatted ADI are inserted here.  -->
</XMLADI>

As a result of this restriction, the XPath to the data used in an authorization rule must include the prefix /XMLADI to access a particular data element within the model. For example, you might add an ADI item of JohnSmith to the document to access the fields of JohnSmith within the ADI XML document. In this case, specify the XPath /XMLADI/JohnSmith to access the data contained in the XML object JohnSmith.

An XPath is the path to a particular child element within the hierarchy of a structured XML data object. Much like a directory path on a hard disk drive is used to access a specific file, an XPath designation starts from the root of the document (in this case /XMLADI). The designation traces a path from this root down through its child elements to the specific element that is being referenced. For example, with the example entitlement JohnSmith in the XML entitlement example as a reference, the JohnSmith XML object has a child element called CreditCard. The child elements of the CreditCard element are attributes which are common to most credit cards. To access Balance under the CreditCard element of JohnSmith, you would use the following XPath:

"/XMLADI/JohnSmith/CreditCard/Balance"