<?xml version="1.0" encoding="UTF-8"?>
<PolicySet
xmlns="http://www.rubix.com/2008/RXSPMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.rubix.com/2008/RXSPMLSchema ../common-scripts/RXSPMLSchema.xsd"
PolicySetId="policy-data" 
PolicyScope="Subtree"
PolicyCombiningAlgId="ordered-permit-overrides">
	<Description>
		Policy for any operation within the policy_data_cat
		Allow op only if from allowed user from localhost
		Deny all others
		Audit permitted operations
	</Description>
	<Target/>
	
	<Policy PolicyId="policy-data-admin" RuleCombiningAlgId="ordered-permit-overrides">
		<Description> Allow op if from allowed user from localhost </Description>
		<Target>
	  	<Subjects> <Subject>
	      <SubjectMatch MatchId="equal">
	         <AttributeValue DataType="string">warner</AttributeValue>
					 <SubjectAttributeDesignator AttributeId="subject-name"/>
	      </SubjectMatch>	
		  <SubjectMatch MatchId="equal">
	         <AttributeValue DataType="ipAddress">127.0.0.1</AttributeValue>
					 <SubjectAttributeDesignator AttributeId="ip-address"/>
	      </SubjectMatch>	
			</Subject> </Subjects>
		</Target>
		<Rule RuleId="permit-all" Effect="Permit"> <Target/></Rule>
	</Policy>
		
	<PolicyIdReference>deny</PolicyIdReference>
	
	<Obligations>
	   <Obligation FulfillOn="Permit" ObligationId="audit"/>
	</Obligations>
		 
</PolicySet>