token-entitlement

Expands to the granted values of the named entitlement for the current object. If its parent element is <arg-node-set>, then all the available values are returned as <entitlement-impl> elements in a node set. Otherwise, the first available value is returned as a string.

Example

<token-entitlement name="manager"/>

Allowed Content

EMPTY

Attributes

Attribute

Possible Values

Default Value

name

CDATA

Name of the attribute. Supports variable expansion.

#REQUIRED

notrace

true | false

True if this element should not be traced during execution of the policy.

false

Content Declaration

Empty

Parent Elements

Element

Description

arg-association

Association argument.

arg-component

Component argument.

arg-dn

DN argument.

arg-node-set

Node set argument.

arg-password

Password argument.

arg-string

String argument

arg-value

Value argument.

token-base64-decode

Decodes base64 data into a string.

token-base64-encode

Encodes a string into base64 data.

token-convert-time

Converts a date/time from one format to another.

token-escape-for-dest-dn

Converts a string for use in a destination DN.

token-escape-for-src-dn

Converts a string for use in a source DN.

token-join

Joins a node-set into a string.

token-lower-case

Converts a string to lowercase.

token-map

Maps a string through a mapping table.

token-parse-dn

Parses or converts a DN.

token-replace-all

Replaces all instances of a substring within a string.

token-replace-first

Replaces a single instance of a substring within a string.

token-split

Splits a string into a node set.

token-substring

Substring of a string.

token-upper-case

Converts a string to uppercase.

token-xml-parse

Parses XML.

token-xml-serialize

Serializes XML.