Reports

Test
@InputContextOnlyR - 1
Location
/xacml-samlp:XACMLAuthzDecisionQuery
Description
Error : The element XACMLAuthzDecisionQuery shall contain an InputContextOnly attribute inside its opening tag
Test
@InputContextOnlyR - 2
Location
/xacml-samlp:XACMLAuthzDecisionQuery
Description
Success : The element XACMLAuthzDecisionQuery shall contain an InputContextOnly attribute inside its opening tag
Test
@InputContextOnly='false'R - 3
Location
/xacml-samlp:XACMLAuthzDecisionQuery
Description
Error : XACMLAuthzDecisionQuery:InputContextOnly attribute SHALL be equal to false
Test
@InputContextOnly='false'R - 4
Location
/xacml-samlp:XACMLAuthzDecisionQuery
Description
Success : XACMLAuthzDecisionQuery:InputContextOnly attribute SHALL be equal to false
Test
@ReturnContextR - 5
Location
/xacml-samlp:XACMLAuthzDecisionQuery
Description
Error : The element XACMLAuthzDecisionQuery shall contain a ReturnContext attribute inside its opening tag
Test
@ReturnContextR - 6
Location
/xacml-samlp:XACMLAuthzDecisionQuery
Description
Success : The element XACMLAuthzDecisionQuery shall contain a ReturnContext attribute inside its opening tag
Test
@ReturnContext='false'R - 7
Location
/xacml-samlp:XACMLAuthzDecisionQuery
Description
Error : XACMLAuthzDecisionQuery:ReturnContext attribute SHALL be equal to false
Test
@ReturnContext='false'R - 8
Location
/xacml-samlp:XACMLAuthzDecisionQuery
Description
Success : XACMLAuthzDecisionQuery:ReturnContext attribute SHALL be equal to false
Test
count(*) = 1 and count(xacml-context:Request) = 1R - 9
Location
/xacml-samlp:XACMLAuthzDecisionQuery
Description
Error : The element XACMLAuthzDecisionQuery shall have only one child element, specifically named Request
Test
count(*) = 1 and count(xacml-context:Request) = 1R - 10
Location
/xacml-samlp:XACMLAuthzDecisionQuery
Description
Success : The element XACMLAuthzDecisionQuery shall have only one child element, specifically named Request
Test
count(*) >= 4 and count(xacml-context:Subject) = 1 and count(xacml-context:Resource) >= 1 and count(xacml-context:Action) = 1 and count(xacml-context:Environment) = 1R - 11
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request
Description
Error : The Request element shall contain at least 4 child elements (one Subject, one (or more) Resource (s), one Action, one Environment). All of them shall comply to the namespace xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os" (e.g. xacml-context:Action)
Test
count(*) >= 4 and count(xacml-context:Subject) = 1 and count(xacml-context:Resource) >= 1 and count(xacml-context:Action) = 1 and count(xacml-context:Environment) = 1R - 12
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request
Description
Success : The Request element shall contain at least 4 child elements (one Subject, one (or more) Resource (s), one Action, one Environment). All of them shall comply to the namespace xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os" (e.g. xacml-context:Action)
Test
count(xacml-context:Subject) = 1R - 13
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request
Description
Error : The Request element shall contain exactly one Subject child element that shall comply to the namespace xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os"
Test
count(xacml-context:Subject) = 1R - 14
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request
Description
Success : The Request element shall contain exactly one Subject child element that shall comply to the namespace xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os"
Test
count(xacml-context:Resource) >= 1R - 15
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request
Description
Error : The Request element shall contain at least one Resource child element (may contain more than one) that shall comply to the namespace xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os"
Test
count(xacml-context:Resource) >= 1R - 16
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request
Description
Success : The Request element shall contain at least one Resource child element (may contain more than one) that shall comply to the namespace xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os"
Test
count(xacml-context:Action) = 1R - 17
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request
Description
Error : The Request element shall contain exactly one Action child element that shall comply to the namespace xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os"
Test
count(xacml-context:Action) = 1R - 18
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request
Description
Success : The Request element shall contain exactly one Action child element that shall comply to the namespace xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os"
Test
count(xacml-context:Environment) = 1R - 19
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request
Description
Error : The Request element shall contain exactly one Environment child element that shall comply to the namespace xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os"
Test
count(xacml-context:Environment) = 1R - 20
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request
Description
Success : The Request element shall contain exactly one Environment child element that shall comply to the namespace xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os"
Test
count(xacml-context:Resource) = 3 and count(matches(*[xacml-context:Attribute[@AttributeId='urn:oasis:names:tc:xacml:1.0:resource:resource-id']]/xacml-context:AttributeValue, $doc_class_normal)) = 1 and count(matches(*[xacml-context:Attribute[@AttributeId='urn:oasis:names:tc:xacml:1.0:resource:resource-id']]/xacml-context:AttributeValue, $doc_class_restricted)) = 1 and count(matches(*[xacml-context:Attribute[@AttributeId='urn:oasis:names:tc:xacml:1.0:resource:resource-id']]/xacml-context:AttributeValue, $doc_class_secret)) = 1R - 21
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request
Description
Error : For ADR due to XDS there shall always be exactly three (3) Resources to be identified, each representing a class of documents: normal, restricted and secret documents. Therefore, each of those three (3) Resources shall use only one of the three (3) classes (e.g. urn:e-health-suisse:2015:epr-subset:8901:normal, urn:e-health-suisse:2015:epr-subset:8901:restricted and urn:e-health-suisse:2015:epr-subset:8901:secret) as AttributeValue for their Attribute with id equal to urn:oasis:names:tc:xacml:1.0:resource:resource-id.
Test
count(xacml-context:Resource) = 3 and count(matches(*[xacml-context:Attribute[@AttributeId='urn:oasis:names:tc:xacml:1.0:resource:resource-id']]/xacml-context:AttributeValue, $doc_class_normal)) = 1 and count(matches(*[xacml-context:Attribute[@AttributeId='urn:oasis:names:tc:xacml:1.0:resource:resource-id']]/xacml-context:AttributeValue, $doc_class_restricted)) = 1 and count(matches(*[xacml-context:Attribute[@AttributeId='urn:oasis:names:tc:xacml:1.0:resource:resource-id']]/xacml-context:AttributeValue, $doc_class_secret)) = 1R - 22
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request
Description
Success : For ADR due to XDS there shall always be exactly three (3) Resources to be identified, each representing a class of documents: normal, restricted and secret documents. Therefore, each of those three (3) Resources shall use only one of the three (3) classes (e.g. urn:e-health-suisse:2015:epr-subset:8901:normal, urn:e-health-suisse:2015:epr-subset:8901:restricted and urn:e-health-suisse:2015:epr-subset:8901:secret) as AttributeValue for their Attribute with id equal to urn:oasis:names:tc:xacml:1.0:resource:resource-id.
Test
count(xacml-context:Attribute) >= 6 and count(*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id']) >= 1 and count(*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier']) >= 1 and count(*[@AttributeId='urn:ihe:iti:xca:2010:homeCommunityId']) >= 1 and count(*[@AttributeId='urn:oasis:names:tc:xacml:2.0:subject:role']) >= 1 and count(*[@AttributeId='urn:oasis:names:tc:xspa:1.0:subject:organization-id']) >= 1 and count(*[@AttributeId='urn:oasis:names:tc:xspa:1.0:subject:purposeofuse']) >= 1R - 23
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The Subject element shall contain at least 6, one of each kind, Attribute child elements (subject-id, subject-id-qualifier, homeCommunityId, role, organization-id, purposeofuse) that shall comply to the namespace xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os" (e.g. xacml-context:Attribute)
Test
count(xacml-context:Attribute) >= 6 and count(*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id']) >= 1 and count(*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier']) >= 1 and count(*[@AttributeId='urn:ihe:iti:xca:2010:homeCommunityId']) >= 1 and count(*[@AttributeId='urn:oasis:names:tc:xacml:2.0:subject:role']) >= 1 and count(*[@AttributeId='urn:oasis:names:tc:xspa:1.0:subject:organization-id']) >= 1 and count(*[@AttributeId='urn:oasis:names:tc:xspa:1.0:subject:purposeofuse']) >= 1R - 24
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The Subject element shall contain at least 6, one of each kind, Attribute child elements (subject-id, subject-id-qualifier, homeCommunityId, role, organization-id, purposeofuse) that shall comply to the namespace xmlns:xacml-context="urn:oasis:names:tc:xacml:2.0:context:schema:os" (e.g. xacml-context:Attribute)
Test
count(*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id']/xacml-context:AttributeValue) = count(*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id'])R - 25
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:1.0:subject:subject-id shall contain an AttributeValue child element
Test
count(*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id']/xacml-context:AttributeValue) = count(*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id'])R - 26
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:1.0:subject:subject-id shall contain an AttributeValue child element
Test
count(*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier']/xacml-context:AttributeValue) = count(*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier'])R - 27
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier shall contain an AttributeValue child element
Test
count(*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier']/xacml-context:AttributeValue) = count(*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier'])R - 28
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier shall contain an AttributeValue child element
Test
count(*[@AttributeId='urn:ihe:iti:xca:2010:homeCommunityId']/xacml-context:AttributeValue) = count(*[@AttributeId='urn:ihe:iti:xca:2010:homeCommunityId'])R - 29
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The Attribute child element with AttributeId equal to urn:ihe:iti:xca:2010:homeCommunityId shall contain an AttributeValue child element
Test
count(*[@AttributeId='urn:ihe:iti:xca:2010:homeCommunityId']/xacml-context:AttributeValue) = count(*[@AttributeId='urn:ihe:iti:xca:2010:homeCommunityId'])R - 30
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The Attribute child element with AttributeId equal to urn:ihe:iti:xca:2010:homeCommunityId shall contain an AttributeValue child element
Test
count(*[@AttributeId='urn:oasis:names:tc:xacml:2.0:subject:role']/xacml-context:AttributeValue) = count(*[@AttributeId='urn:oasis:names:tc:xacml:2.0:subject:role'])R - 31
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:2.0:subject:role shall contain an AttributeValue child element
Test
count(*[@AttributeId='urn:oasis:names:tc:xacml:2.0:subject:role']/xacml-context:AttributeValue) = count(*[@AttributeId='urn:oasis:names:tc:xacml:2.0:subject:role'])R - 32
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:2.0:subject:role shall contain an AttributeValue child element
Test
count(*[@AttributeId='urn:oasis:names:tc:xspa:1.0:subject:purposeofuse']/xacml-context:AttributeValue) = count(*[@AttributeId='urn:oasis:names:tc:xspa:1.0:subject:purposeofuse'])R - 33
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The Attribute child element with AttributeId equal to urn:oasis:names:tc:xspa:1.0:subject:purposeofuse shall contain an AttributeValue child element
Test
count(*[@AttributeId='urn:oasis:names:tc:xspa:1.0:subject:purposeofuse']/xacml-context:AttributeValue) = count(*[@AttributeId='urn:oasis:names:tc:xspa:1.0:subject:purposeofuse'])R - 34
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The Attribute child element with AttributeId equal to urn:oasis:names:tc:xspa:1.0:subject:purposeofuse shall contain an AttributeValue child element
Test
every $i in *[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id'] satisfies matches($i/@DataType, '(.*:)?string')R - 35
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The DataType of Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:1.0:subject:subject-id shall be considered a String and - as a result - set to http://www.w3.org/2001/XMLSchema#string
Test
every $i in *[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id'] satisfies matches($i/@DataType, '(.*:)?string')R - 36
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The DataType of Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:1.0:subject:subject-id shall be considered a String and - as a result - set to http://www.w3.org/2001/XMLSchema#string
Test
every $i in *[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier'] satisfies matches($i/@DataType, '(.*:)?string')R - 37
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The DataType of Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier shall be considered a URI and - as a result - set to http://www.w3.org/2001/XMLSchema#anyURI
Test
every $i in *[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier'] satisfies matches($i/@DataType, '(.*:)?string')R - 38
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The DataType of Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier shall be considered a URI and - as a result - set to http://www.w3.org/2001/XMLSchema#anyURI
Test
every $i in *[@AttributeId='urn:ihe:iti:xca:2010:homeCommunityId'] satisfies matches($i/@DataType, '(.*:)?anyURI')R - 39
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The DataType of Subject's Attribute child element with AttributeId equal to urn:ihe:iti:xca:2010:homeCommunityId shall be considered a URI and - as a result - set to http://www.w3.org/2001/XMLSchema#anyURI
Test
every $i in *[@AttributeId='urn:ihe:iti:xca:2010:homeCommunityId'] satisfies matches($i/@DataType, '(.*:)?anyURI')R - 40
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The DataType of Subject's Attribute child element with AttributeId equal to urn:ihe:iti:xca:2010:homeCommunityId shall be considered a URI and - as a result - set to http://www.w3.org/2001/XMLSchema#anyURI
Test
every $i in *[@AttributeId='urn:oasis:names:tc:xacml:2.0:subject:role'] satisfies matches($i/@DataType, '(.*:)?CV')R - 41
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The DataType of Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:2.0:subject:role shall be considered a CV (CodedValue) and - as a result - set to urn:hl7-org:v3#CV
Test
every $i in *[@AttributeId='urn:oasis:names:tc:xacml:2.0:subject:role'] satisfies matches($i/@DataType, '(.*:)?CV')R - 42
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The DataType of Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:2.0:subject:role shall be considered a CV (CodedValue) and - as a result - set to urn:hl7-org:v3#CV
Test
every $i in *[@AttributeId='urn:oasis:names:tc:xspa:1.0:subject:organization-id'] satisfies matches($i/@DataType, '(.*:)?anyURI')R - 43
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The DataType of Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xspa:1.0:subject:organization-id shall be considered a URI and - as a result - set to http://www.w3.org/2001/XMLSchema#anyURI
Test
every $i in *[@AttributeId='urn:oasis:names:tc:xspa:1.0:subject:organization-id'] satisfies matches($i/@DataType, '(.*:)?anyURI')R - 44
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The DataType of Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xspa:1.0:subject:organization-id shall be considered a URI and - as a result - set to http://www.w3.org/2001/XMLSchema#anyURI
Test
every $i in *[@AttributeId='urn:oasis:names:tc:xspa:1.0:subject:purposeofuse'] satisfies matches($i/@DataType, '(.*:)?CV')R - 45
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The DataType of Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xspa:1.0:subject:purposeofuse shall be considered a CV (CodedValue) and - as a result - set to urn:hl7-org:v3#CV
Test
every $i in *[@AttributeId='urn:oasis:names:tc:xspa:1.0:subject:purposeofuse'] satisfies matches($i/@DataType, '(.*:)?CV')R - 46
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The DataType of Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xspa:1.0:subject:purposeofuse shall be considered a CV (CodedValue) and - as a result - set to urn:hl7-org:v3#CV
Test
*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id']/normalize-space(*)R - 47
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The AttributeValue for Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:1.0:subject:subject-id shall not be empty
Test
*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id']/normalize-space(*)R - 48
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The AttributeValue for Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:1.0:subject:subject-id shall not be empty
Test
*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier']/normalize-space(*)R - 49
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Error : The AttributeValue for Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier shall not be empty
Test
*[@AttributeId='urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier']/normalize-space(*)R - 50
Location
/xacml-samlp:XACMLAuthzDecisionQuery/xacml-context:Request/xacml-context:Subject
Description
Success : The AttributeValue for Subject's Attribute child element with AttributeId equal to urn:oasis:names:tc:xacml:1.0:subject:subject-id-qualifier shall not be empty
Only the first 50 reports are displayed