...
| ID | Data Type | Source | In Request? | Notes |
|---|---|---|---|---|
urn:oasis:names:tc:xacml:1.0:resource:resource-id | string | ModeShape Fedora path | Yes | The full modeshape Fedora path |
| URIModeShape | pathFedora URI | Yes | Fedora graph subject URI for this node |
urn:oasis:names:tc:xacml:2.0:resource:resource-ancestor-or-self | string | ModeShape Fedora path | Yes | Set of paths for this resource and its ancestors |
urn:oasis:names:tc:xacml:1.0:resource:resource-parent | string | ModeShape Fedora path | Yes | Path of the parent of the resource (always an existing node, in session if not saved to workspace) |
urn:oasis:names:tc:xacml:2.0:resource:resource-ancestor | string | ModeShape Fedora path | Yes | Set of paths of all ancestor nodes |
urnfcrepo:fedora:xacml:2.0:resource:resource-workspace | string | ModeShape session | Yes | Name of the workspace |
urn:oasis:names:tc:xacml:1.0:resource:scope | string | AuthZ Delegate | Yes | If the action impacts child nodes, then value will be "Descendants", otherwise it will be "Immediate". A "remove" is an example of such an action.‡ |
...