source: fedd/wsdl/abac_types.xsd @ cc58813

<?xml version="1.0"?>
<xsd:schema targetNamespace="http://www.isi.edu/faber/abac_types"
  xmlns:xsd="http://www.w3.org/2001/XMLSchema"
  xmlns:tns="http://www.isi.edu/faber/abac_types"
  xmlns:xsd1="http://www.isi.edu/faber/fedd_types"
  xmlns="http://www.w3.org/2000/10/XMLSchema">

  <xsd:annotation>
    <xsd:documentation xml:lang="en">
      Trust negotiation schema for the NAI Labs ABAC Project.
      Copyright 2002 Networks Associates Technologies, Inc.
      All rights reserved.
    </xsd:documentation>
  </xsd:annotation> 
    
  <xsd:complexType name="negotiationType">
    <xsd:sequence>
      <xsd:element name="observation" type="tns:observationType"
        minOccurs="0" maxOccurs="unbounded"/>
    </xsd:sequence>
  </xsd:complexType>

  <xsd:complexType name="observationType">
    <xsd:choice>
      <xsd:element name="SimpleTTNode" type="tns:simpleTTNodeType"/>
      <xsd:element name="NodeOp" type="tns:nodeOpType"/>
      <xsd:element name="EdgeOp" type="tns:edgeOpType"/>
      <xsd:element name="Message" type="tns:messageType"/>
      <xsd:element name="Update" type="tns:updateType"/>
    </xsd:choice>
    <xsd:attribute name="count" type="xsd:decimal"/>
  </xsd:complexType>

  <xsd:complexType name="updateType">
    <xsd:attribute name="value" type="xsd:string"/>
  </xsd:complexType>

  <xsd:complexType name="messageType">
    <xsd:sequence>
      <xsd:element name="EdgeOp" type="tns:edgeOpType" minOccurs="0" 
        maxOccurs="unbounded"/>
      <xsd:element name="NodeOp" type="tns:nodeOpType" minOccurs="0" 
        maxOccurs="unbounded"/>
      <xsd:element name="evidence" type="tns:evidenceType"/>
    </xsd:sequence>
  </xsd:complexType>  

  <xsd:complexType name="simpleTTNodeType">
    <xsd:sequence>
      <xsd:element name="Goal"              type="tns:goalType"/>
      <xsd:element name="SatisfactionState" type="xsd:string"/>
      <xsd:element name="ProcessingState"   type="xsd:string"/>
    </xsd:sequence>
    <xsd:attribute name="type" type="xsd:string" use="optional"/>
  </xsd:complexType>

  <xsd:complexType name="nodeOpType">
    <xsd:sequence>
      <xsd:element name="TrustTarget"      type="tns:goalType"/>
      <xsd:element name="ProcessingState"  type="xsd:string"/>
    </xsd:sequence>
    <xsd:attribute name="type" type="xsd:string" use="optional"/>
  </xsd:complexType>

  <xsd:complexType name="edgeOpType">
    <xsd:sequence>
      <xsd:element name="Parent"           type="tns:goalType"/>
      <xsd:element name="Child"            type="tns:goalType"/>
      <xsd:element name="ProcessingState"  type="xsd:string"/>
    </xsd:sequence>
    <xsd:attribute name="type" type="xsd:string"/>
    <xsd:attribute name="newChild" type="xsd:date"/>
  </xsd:complexType>

  <xsd:complexType name="goalType">
    <xsd:sequence>
      <xsd:element name="Verifier"   type="tns:principalType"/>
      <xsd:element name="Target" type="tns:entityType"/>
      <xsd:element name="Subject"   type="tns:principalType"/>
    </xsd:sequence>
  </xsd:complexType>

  <!-- Here are the new credential descriptions -->

  <xsd:complexType name="entityType">
    <xsd:choice>
      <xsd:element name="principal" type="tns:principalType"/>
      <xsd:element name="role" type="tns:simpleRoleType"/>
      <xsd:element name="linkedrole" type="tns:linkedRoleType"/>
      <xsd:element name="intersection" type="tns:intersectionType"/>
    </xsd:choice>
  </xsd:complexType>

  <xsd:complexType name="roleType">
    <xsd:choice>
      <xsd:element name="role" type="tns:simpleRoleType"/>
      <xsd:element name="linkedrole" type="tns:linkedRoleType"/>
      <xsd:element name="intersection" type="tns:intersectionType"/>
    </xsd:choice>
  </xsd:complexType>

  <!-- This is a copy of fedd's IDType, included in case we have to expand or
       restrict it. XSD isn't wonderful at expressing these kinds of synonyms
       between complex types. -->
  <xsd:complexType name="principalType">
    <xsd:choice>
      <xsd:element name="uuid" type="xsd:base64Binary"/>
      <xsd:element name="fedid" type="xsd:base64Binary"/>
      <xsd:element name="uri" type="xsd:string"/>
      <xsd:element name="localname" type="xsd:string"/>
      <xsd:element name="kerberosUsername" type="xsd:string"/>
    </xsd:choice>
  </xsd:complexType>

  <xsd:complexType name="simpleRoleType">
    <xsd:sequence>
      <xsd:element name="principal" type="tns:principalType"/>
      <xsd:element name="rolename" type="xsd:string"/>
    </xsd:sequence>
  </xsd:complexType>

  <xsd:complexType name="linkedRoleType">
    <xsd:sequence>
      <xsd:element name="linkingrole" type="tns:simpleRoleType"/>
      <xsd:element name="rolename" type="xsd:string"/>
    </xsd:sequence>
  </xsd:complexType>

  <xsd:complexType name="intersectionType">
    <xsd:sequence>
      <xsd:element name="role" type="tns:roleType" minOccurs="2" 
        maxOccurs="unbounded"/>
    </xsd:sequence>
  </xsd:complexType>

  <xsd:complexType name="credentialType">
    <xsd:sequence>
      <xsd:element name="role" type="tns:roleType"/>
      <xsd:element name="requirement" type="tns:entityType"/>
    </xsd:sequence>
  </xsd:complexType>

  <xsd:complexType name="evidenceType">
    <xsd:sequence>
      <xsd:element name="credential" type="tns:credentialType" minOccurs="1"
        maxOccurs="unbounded"/>
    </xsd:sequence>
  </xsd:complexType>

</xsd:schema>