Claims schema

The claims schema is used to create property fields which appear in Admin view under a user's Security Privileges column.

Security privileges are assigned by entering values into these property fields.

Multiple property fields can be created in the claims schema.

Child element tags

Table 1: Child element tags in the claims schema

Tag

Description

<property>

Property fields are created in the security model's claims schema with the <property> tag.

The <property> tag (when used in the claims schema) has five attributes:

 

class

Accepts a value of string or enumeration.

string is used for normal property fields that can accept any user created value.

enumeration is used to create a property field with selectable values.

Selectable values are defined within additional <value> tags.

 

name

Accepts any continuous text value.

This is the value that gets referenced when security model rules are created.

 

label

Accepts any continuous text value.

This is the display name of the property field in the Sintelix user interface.

 

min-occurs

Defines the minimum number of values a property field can accept.

Normally set to zero or one.

 

max-occurs

Defines the maximum number of values a property field can accept.

If there is no limit, this should be to zero.

<value>

<value> tags are used to create a list of predefined values that can be entered in a property field.

Code examples

Table 2: Code examples for common implementations of the Claims Schema

Task

Code example and Sintelix UI output

Enable the security model with no additional Security Privileges property fields

<claims-schema>

<!-- no security model defined properties -->

</claims-schema>

Sintelix UI output on Admin > Manage User accounts tab:

Create a Security Privileges property field that accepts unlimited values

<claims-schema>

<property class="string" min-occurs="0" max-occurs="0" name="group" label="Group" />

</claims-schema>

Sintelix UI output on Admin > Manage User accounts tab:

Create a Security Privileges property field that can have a maximum of one value

<claims-schema>

<property class="string" min-occurs="0" max-occurs="1" name="group" label="Group" />

</claims-schema>

Sintelix UI output as shown above.

Create a Security Privileges property field that must have exactly one value

<claims-schema>

<property class="string" min-occurs="1" max-occurs="1" name="group" label="Group" />

</claims-schema>

Sintelix UI output as shown above.

Create a Security Privileges property field that must have one value from a selection of predefined options

<claims-schema>

<property class="enumeration" min-occurs="1" max-occurs="1" name="security-clearance" label="Security Clearance">

<value>UNCLASSIFIED</value>

<value>PROTECTED</value>

<value>CONFIDENTIAL</value>

<value>SECRET</value>

<value>TOP SECRET</value>

</property>

</claims-schema>

Sintelix UI output on Admin > Manage User accounts tab:

 

fontfontfont