booleanOneAndOnly Function Description

Description

This function takes in a bag of attributes of type boolean and returns a single value. It only works if the bag contains a single value. If the bag contains zero values or more than 1 value than the function will trigger an error yielding Indeterminate. Use this function when you need to compare an attribute to a single value. See example below.

booleanOneAndOnly belongs to the ALFA function reference's Bag functions category. It maps to the XACML function identifier urn:oasis:names:tc:xacml:1.0:function:boolean-one-and-only, takes 1 argument and returns a value of type boolean.

Property Value
Category Bag functions
# Arguments 1
Arguments
  • A bag of attribute values of type boolean.
Return Value boolean
Expressed As pre-fix
Representation ALFA short name
Allowed In Target false
ALFA Shorthand None
Commutative false

Example

/**
 * Check whether a user is certified
 */
rule booleanOneAndOnlyExample{
    permit
    condition booleanOneAndOnly(certified)==true
}

In this example, access is permitted if the user is certified.