Performs a test on an operation property on the current operation. The type of test performed depends on the operator specified by the op attribute. The following table shows the type of test performed by each operator.
Operator |
Returns true when... |
---|---|
available |
There is an operation property with the specified name on the current operation. |
equal |
There is a an operation property with the specified name on the current operation and its value equals the content of <if-op-property> when compared using the specified comparison mode. Supports variable expansion. |
lt |
There is a an operation property with the specified name on the current operation and its value is less than the content of the condition when compared using the specified comparison mode. Supports variable expansion. |
gt |
There is a an operation property with the specified name on the current operation and its value is greater than the content of the condition when compared using the specified comparison mode. Supports variable expansion. |
not-available |
Available returns false. |
not-equal |
Equal returns false. |
not-lt |
Less than returns false. |
not-gt |
Greater than returns false. |
<if-op-property op="available" name="myLocalVariable"/> <if-op-property op="equal" mode="nocase" name="myProperty">true</if-local-variable>
#PCDATA
Attribute |
Possible Values |
Default Value |
---|---|---|
disabled |
true | false True if this element is disabled. |
false |
mode |
case | nocase | regex | src-dn | dest-dn | numeric | octet Comparison mode if op=“equal” or op=“not-equal”. |
nocase |
name |
CDATA Name of the operation property. Supports variable expansion. |
#REQUIRED |
notrace |
true | false True if this element should not be traced during execution of the policy. |
false |
op |
available | equal | lt | gt | not-available | not-equal | not-lt | not-gt Test operator. |
#REQUIRED |
( #PCDATA )