Novell IDENTITY MANAGER 3.6.1 - ENTITLEMENTS, Manual

Page: 39 / 44

Writing Entitlements in XML 39
no
vd
ocx
(e
n)
13
Ma
y 20
09
<!--
Entitlement result stored in the DirXML-EntitlementResult attribute of a
DirXML-EntitlementRecipient object.
-->
The Entitlement Result portion reports the results about whether an entitlement is granted or
revoked. The information includes the state or status of the event and when the event is granted or
revoked (through a time stamp). You don’t need to do anything with the elements and attributes
under this heading.
<!--
Cached query results stored in the DirXML-SPCachedQuery attribute of a
DirXML-Entitlement object.
-->
The Entitlement Query portion contains the entitlement values that are gathered from an external
application. This information can then be used again if the entitlement client needs to display this
information. These values are stored in the
DirXML-SPCachedQuery
attribute of the Entitlement
object. You don’t need to do anything with the elements and attributes under this heading.
<!--
Representation of a DirXML-EntitlementRef within the DirXML Script and
within the operation-data of an operation in an XDS document.
-->
Because the DTD defines values for more than one document, this EntitlementRef portion is
actually not part of the Entitlement definition. You don’t need to do anything with the elements and
attributes under this heading.
A.2 Examples to Help You Write Your Own
Entitlements
You can create valued and valueless entitlements. Valued entitlements can get their values from an
external query, from an administrator-defined list, or free form. The following sections contain
examples of four entitlements you can create.
Š Section A.2.1, “Example 1: Account Entitlement: Valueless,” on page 39
Š
Section A.2.2, “Example 2: Application Query Entitlement: External Query,” on page 40
Š Section A.2.3, “Example 3: Administrator-Defined Entitlement: With Lists,” on page 43
Š
Section A.2.4, “Example 4: Administrator-Defined Entitlements: Without Lists,” on page 43
A.2.1 Example 1: Account Entitlement: Valueless
<?xml version="1.0" encoding="UTF-8"?>
<entitlement conflict-resolution="priority"
description="This is an Account Entitlement"
display-name="Account Entitlement"/>
In this example, the valueless entitlement’s name is Account. This is followed by the conflict-
resolution line with the default setting of Priority, which in most cases means that if the entitlement
is used by Role-Based Entitlements, the RBE with priority sets the value. (However, because this is
an example of a valueless entitlement, valued settings don’t apply.) The Entitlement description is