Node Type QName Matches

This section describes features that are coming in 3.3.

The node-type-matches condition allows you to constrain a policy statement so that it applies to content nodes that have a matching Type QName. This condition supports regular expressions, allowing you to focus in on a single path, sub paths or arbitary matching path structures.

Configuration

{
    "type": "node-type-matches",
    "config": {
        "qname": "{value regex}"
    }
}

Sample #1

This policy document allows a principal to read content of type my:article.

{
    "title": "My Sample Policy",
    "statements": [{
        "action": "grant",
        "roles": ["consumer"],
        "conditions": [{
            "type": "node-type-matches",
            "config": {
                "qname": "my:article"
            }
        }]
    }]
}