source: ccr/trunk/nhin-vista/projects/NHINC/Current/Product/Production/Adapters/General/ConsumerPreferencesProfileGUI/test/gov/hhs/fha/nhinc/cpp/OptOut.xml@ 507

<Policy xmlns="urn:oasis:names:tc:xacml:2.0:Policy:schema:os" xmlns:nhin="http://www.hhs.gov/healthit/nhin" Policyid="12345678-1234-1234-1234-123456789abc" rulecombiningalgid="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:first-applicable">
  <Description>Sample XACML Policy showing access by user role</Description>


  <Target>
    <Actions>
      <Action>
        <ActionMatch matchid="urn:oasis:names:tc:xacml:1.0:function:string-equal">
          <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#anyURI">
            http://www.hhs.gov/healthit/nhin#retrieveDocument
          </AttributeValue>
          <ActionAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:2.0:Action" DataType="http://www.w3.org/2001/XMLSchema#anyURI">
          </ActionAttributeDesignator>
        </ActionMatch>
      </Action>
    </Actions>

    <Environments>
      <Environment>
        <Environmentmatch matchid="http://www.hhs.gov/healthit/nhin/function#instance-identifier-equal">
          <AttributeValue DataType="http://www.hhs.gov/healthit/nhin#instance-identitifer">
            <PatientId Root="123" Extension="123-123">
            </PatientId>
          </AttributeValue>
          <EnvironmentAttributeDesignator AttributeId="http://www.hhs.gov/healthit/nhin#subject-id" DataType="http://www.hhs.gov/healthit/nhin#instance-identitifer">
          </EnvironmentAttributeDesignator>
        </Environmentmatch>
      </Environment>
    </Environments>
  </Target>

  <rule RuleId="125" Effect="Deny">
    <Description>deny all access to documents. </Description>
    <Target>
    </Target>
  </rule>
</Policy>