<?xml version="1.0" encoding="UTF-8"?>
<PolicySet   xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os"
			xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
			xsi:schemaLocation="urn:oasis:names:tc:xacml:1.0:policy /pro/xacml/summer2004/xacml/schema/cs-xacml-schema-policy-01.xsd"
	PolicyCombiningAlgId="urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"
	PolicySetId="policy_1" Version="1.0">
   <Target/>
   <Policy 
      xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      PolicyId="policy_1" 
      RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:first-applicable">
      <Target/>
      <VariableDefinition VariableId="hospital_staff">
         <Apply  FunctionId="urn:oasis:names:tc:xacml:1.0:function:or">
               <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                  <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only">
                     <SubjectAttributeDesignator
                        AttributeId="subject-id"
                        DataType="http://www.w3.org/2001/XMLSchema#string" />
                  </Apply>
                  <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">physician</AttributeValue>
               </Apply>
               <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                  <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only">
                     <SubjectAttributeDesignator
                        AttributeId="subject-id"
                        DataType="http://www.w3.org/2001/XMLSchema#string" />
                  </Apply>
                  <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">nurse</AttributeValue>
               </Apply>
               <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                  <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only">
                     <SubjectAttributeDesignator
                        AttributeId="subject-id"
                        DataType="http://www.w3.org/2001/XMLSchema#string" />
                  </Apply>
                  <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">radiologist</AttributeValue>
               </Apply>
                   		      </Apply>
      </VariableDefinition>
      <Rule RuleId="rule_5" Effect="Permit" >
         <Target/>
         <Condition  FunctionId="urn:oasis:names:tc:xacml:1.0:function:and">
               <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:or">
                  <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                     <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only">
                        <SubjectAttributeDesignator
                           AttributeId="subject-id"
                           DataType="http://www.w3.org/2001/XMLSchema#string" />
                     </Apply>
                     <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">physician</AttributeValue>
                  </Apply>
                  <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and">
                     <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                        <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only">
                           <SubjectAttributeDesignator
                              AttributeId="subject-id"
                              DataType="http://www.w3.org/2001/XMLSchema#string" />
                        </Apply>
                        <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">nurse</AttributeValue>
                     </Apply>
                     <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:or">
                        <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                           <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only">
                              <SubjectAttributeDesignator
                                 AttributeId="Location"
                                 DataType="http://www.w3.org/2001/XMLSchema#string" />
                           </Apply>
                           <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">emergency room</AttributeValue>
                        </Apply>
                        <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                           <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only">
                              <SubjectAttributeDesignator
                                 AttributeId="Location"
                                 DataType="http://www.w3.org/2001/XMLSchema#string" />
                           </Apply>
                           <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">operating room</AttributeValue>
                        </Apply>
                     </Apply>
                  </Apply>
               </Apply>
               <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:or">
                  <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                     <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only">
                        <SubjectAttributeDesignator
                           AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id"
                           DataType="http://www.w3.org/2001/XMLSchema#string" />
                     </Apply>
                     <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">surgeries report</AttributeValue>
                  </Apply>
                  <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                     <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only">
                        <SubjectAttributeDesignator
                           AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id"
                           DataType="http://www.w3.org/2001/XMLSchema#string" />
                     </Apply>
                     <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">diagnosis</AttributeValue>
                  </Apply>
               </Apply>
               <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                  <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only">
                     <SubjectAttributeDesignator
                        AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id"
                        DataType="http://www.w3.org/2001/XMLSchema#string" />
                  </Apply>
                  <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">read</AttributeValue>
               </Apply>
         </Condition>
      </Rule>
   </Policy>
</PolicySet>
