base64BinaryOneAndOnly Function Description

Description

This function takes in a bag of attributes of type base64Binary and returns a single value. It only works if the bag contains a single value. If the bag contains zero values or more than 1 value than the function will trigger an error yielding Indeterminate. Use this function when you need to compare an attribute to a single value. See example below.

base64BinaryOneAndOnly belongs to the ALFA function reference's Bag functions category. It maps to the XACML function identifier urn:oasis:names:tc:xacml:1.0:function:base64Binary-one-and-only, takes 1 argument and returns a value of type base64Binary.

Property Value
Category Bag functions
# Arguments 1
Arguments
  • A bag of attribute values of type base64Binary.
Return Value base64Binary
Expressed As pre-fix
Representation ALFA short name
Allowed In Target false
ALFA Shorthand None
Commutative false

Example

/**
    * Compare a base64-encoded attribute to a single value
    */
rule base64BinaryOneAndOnlyExample{
    permit
    condition base64BinaryOneAndOnly(encodedMessage)=="SGVsbG8gV29ybGQh":base64Binary
}

In this example, access is permitted if the encoded message is equal to the value in the policy.

See Also

Related Functions

Other functions in the Bag functions category:

Browse the full ALFA function reference.