IdentityCondition

This feature allows you to specify a condition on the roles of the Principal invoking the service.

The following table shows the IdentityCondition attributes:

Attribute	Type	Description
type	fixed	This attribute must assume the value condition
class	fixed	This attribute must assume the value it.greenvulcano.gvesb.identity.condition.IdentityCondition
condition	required	This attribute defines the name of the condition. Unique inside the 'Conditions' element.

Its subelements are:

• Description
• ACL

ACL

This element defines a resource ACL (Access Control List). It is used by elements DefaultRes, IdentityCondition, ServiceRes.

Might contain more elements RoleRef.

RoleRef

Element RoleRef defines an ACL role reference. Its attributes are:

Attribute	Type	Description
name	required	Role name

The name must be defined in GVPolicy, the GreenVulcano^® ESB ACL Policy framework.