do-for-each

Repeats the actions specified by <arg-actions> once for each node in <arg-node-set> with the local variable current-node set to a node-set containing only that node. If the current-node is <entitlement-impl>, then the actions are also marked as if they were also enclosed in <do-implement-entitlement>.

Example

<do-for-each>  <arg-node-set>  <token-added-entitlement name="Group"> </arg-node-set>  <arg-actions>  <do-add-dest-attr-value name="Member" class-name="Group">  <arg-dn>  <token-local-variable name="current-node"/>  </arg-dn>  <arg-value type="dn">  <token-dest-dn/>  </arg-value>  </do-add-dest-attr-value>  </arg-actions> </do-for-each>

Allowed Content

Element

Description

arg-node-set

Node set argument.

arg-actions

Actions argument.

Attributes

Attribute

Possible Values

Default Value

disabled

true | false

True if this element is disabled.

false

notrace

true | false

True if this element should not be traced during execution of the policy.

false

Content Rule

( arg-node-set , arg-actions )

Parent Elements

Element

Description

actions

Actions that are performed by a <rule>.

arg-actions

Actions argument.