token-removed-entitlement

Expands to the revoked values of the named entitlement in the current operation. If its parent element is <arg-node-set>, then all the available values are returned as <entitlement-impl> elements in a node set. Otherwise, the first available value is returned as a string.

Example

<token-removed-entitlement name="manager"/>

Allowed Content

EMPTY

Attributes

Attribute

Possible Values

Default Value

name

CDATA

Name of the attribute.

#REQUIRED

notrace

true | false

True if this element should not be traced during execution of the policy.

false

Content Declaration

Empty

Parent Elements

Element

Description

arg-association

Association argument.

arg-component

Component argument.

arg-dn

DN argument.

arg-node-set

Node set argument.

arg-password

Password argument.

arg-string

String argument.

arg-value

Value argument.

token-base64-decode

Decode base64 data into a string.

token-base64-encode

Encode a string into base64 data.

token-convert-time

Convert a data/time from one format to another format.

token-escape-for-dest-dn

Convert a string for use in the destination DN.

token-escape-for-src-dn

Convert a string for use in a source DN.

token-join

Join a node set into a string.

token-lower-case

Convert a string to lowercase.

token-map

Map a string through a mapping table.

token-parse-dn

Parses or converts a DN.

token-replace-all

Replaces all instances of a substring with a string.

token-replace-first

Replaces a single instance of a substring within a string.

token-split

Splits a string into a node set.

token-substring

Substring of a string.

token-upper-case

Converts a string to uppercase.

token-xml-parse

Parses XML.

token-xml-serialize

Serializes XML.