Add limit on POST size.

[shibboleth/cpp-sp.git] / schemas / shibboleth-2.0-afp.xsd

diff --git a/schemas/shibboleth-2.0-afp.xsd b/schemas/shibboleth-2.0-afp.xsd
index 9d3ad12..675f41f 100644 (file)
--- a/schemas/shibboleth-2.0-afp.xsd
+++ b/schemas/shibboleth-2.0-afp.xsd
@@ -1,7 +1,10 @@
 <?xml version="1.0" encoding="UTF-8"?>
 
-<schema targetNamespace="urn:mace:shibboleth:2.0:afp" xmlns="http://www.w3.org/2001/XMLSchema"
-    xmlns:afp="urn:mace:shibboleth:2.0:afp" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">\r
+<schema targetNamespace="urn:mace:shibboleth:2.0:afp"
+    xmlns="http://www.w3.org/2001/XMLSchema"
+    xmlns:afp="urn:mace:shibboleth:2.0:afp"
+    xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
+    elementFormDefault="qualified">\r
 \r
     <import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="classpath:/schema/xmldsig-core-schema.xsd" />\r
 \r
@@ -18,7 +21,7 @@
     </element>
     <complexType name="AttributeFilterPolicyGroupType">
         <complexContent>
-            <extension base="afp:IndentityType">
+            <extension base="afp:IdentityType">
                 <sequence>
                     <element ref="afp:PolicyRequirementRule" minOccurs="0" maxOccurs="unbounded">
                         <annotation>
@@ -28,17 +31,24 @@
                             </documentation>
                         </annotation>
                     </element>
-                    <element ref="afp:AttributeRule" minOccurs="0" maxOccurs="unbounded">
+                    <element ref="afp:PermitValueRule" minOccurs="0" maxOccurs="unbounded">
                         <annotation>
                             <documentation>
-                                Defines an attribute rule that may be reused across multiple filter policies.
+                                Defines a permit value rule that may be reused across multiple attribute rules.
                             </documentation>
                         </annotation>
                     </element>
-                    <element ref="afp:PermitValueRule" minOccurs="0" maxOccurs="unbounded">
+                    <element ref="afp:DenyValueRule" minOccurs="0" maxOccurs="unbounded">
                         <annotation>
                             <documentation>
-                                Defines an attribute value filter that may be reused across multiple attribtue rules.
+                                Defines a deny value rule that may be reused across multiple attribute rules.
+                            </documentation>
+                        </annotation>
+                    </element>
+                    <element ref="afp:AttributeRule" minOccurs="0" maxOccurs="unbounded">
+                        <annotation>
+                            <documentation>
+                                Defines an attribute rule that may be reused across multiple filter policies.
                             </documentation>
                         </annotation>
                     </element>\r
@@ -73,7 +83,7 @@
     </element>
     <complexType name="AttributeFilterPolicyType">
         <complexContent>
-            <extension base="afp:IndentityType">
+            <extension base="afp:IdentityType">
                 <sequence>
                     <choice>
                         <element ref="afp:PolicyRequirementRule">
@@ -86,7 +96,7 @@
                         <element name="PolicyRequirementRuleReference" type="afp:ReferenceType">
                             <annotation>
                                 <documentation>
-                                    Rerfence to a PolicyRequirement defined within this policy group or another.
+                                    Reference to a PolicyRequirement defined within this policy group or another.
                                 </documentation>
                             </annotation>
                         </element>
@@ -102,7 +112,7 @@
                         <element name="AttributeRuleReference" type="afp:ReferenceType">
                             <annotation>
                                 <documentation>
-                                    Rerfence to a AttribtueRule defined within this policy group or another.
+                                    Reference to a AttributeRule defined within this policy group or another.
                                 </documentation>
                             </annotation>
                         </element>
@@ -119,23 +129,28 @@
     </element>\r
     <complexType name="AttributeRuleType">
         <complexContent>
-            <extension base="afp:IndentityType">
+            <extension base="afp:IdentityType">
                 <choice>
-                    <element ref="afp:PermitValueRule">
-                        <annotation>
-                            <documentation>
-                                A filter for attribute values. If the filter evaluates to true the value is permitted,
-                                otherwise it is filtered out.
-                            </documentation>
-                        </annotation>
-                    </element>
-                    <element name="PermitValueRuleReference" type="afp:ReferenceType">
-                        <annotation>
-                            <documentation>
-                                Rerfence to a PermitValueRule defined within this policy group or another.
-                            </documentation>
-                        </annotation>
-                    </element>
+                    <choice minOccurs="0">
+                        <element ref="afp:PermitValueRule" />
+                        <element name="PermitValueRuleReference" type="afp:ReferenceType">
+                            <annotation>
+                                <documentation>
+                                    Reference to a PermitValueRule defined within this policy group or another.
+                                </documentation>
+                            </annotation>
+                        </element>
+                    </choice>
+                    <choice minOccurs="0">
+                        <element ref="afp:DenyValueRule" />
+                        <element name="DenyValueRuleReference" type="afp:ReferenceType">
+                            <annotation>
+                                <documentation>
+                                    Reference to a DenyValueRule defined within this policy group or another.
+                                </documentation>
+                            </annotation>
+                        </element>
+                    </choice>
                 </choice>
                 <attribute name="attributeID" type="string" use="required">
                     <annotation>
@@ -154,18 +169,24 @@
     <element name="PermitValueRule" type="afp:MatchFunctorType">
         <annotation>
             <documentation>
-                A filter for attribtue values. If the filter evaluates to true the value is permitted, otherwise it is
-                filtered out.
+                A filter for attribute values. If the filter evaluates to true the value is permitted to be released.
+            </documentation>
+        </annotation>
+    </element>
+    <element name="DenyValueRule" type="afp:MatchFunctorType">
+        <annotation>
+            <documentation>
+                A filter for attribute values. If the filter evaluates to true the value is denied and may not be released.
             </documentation>
         </annotation>
     </element>
     <complexType name="MatchFunctorType" abstract="true">
         <complexContent>
-            <extension base="afp:IndentityType" />
+            <extension base="afp:IdentityType" />
         </complexContent>
     </complexType>
 
-    <complexType name="IndentityType">
+    <complexType name="IdentityType">
         <attribute name="id" type="string">
             <annotation>
                 <documentation>An ID, unique within the policy and component type.</documentation>