dnsNameOneAndOnly Function Description
Description
This function takes in a bag of attributes of type dnsName and returns a single value. It only works if the bag contains a single value. If the bag contains zero values or more than 1 value than the function will trigger an error yielding Indeterminate. Use this function when you need to compare an attribute to a single value. See example below.
dnsNameOneAndOnly belongs to the ALFA function reference's
Bag functions category. It maps to the XACML function identifier
urn:oasis:names:tc:xacml:2.0:function:dnsName-one-and-only, takes 1 argument and returns a value of type dnsName.
| Property | Value |
|---|---|
| Category | Bag functions |
| # Arguments | 1 |
| Arguments |
|
| Return Value | dnsName |
| Expressed As | pre-fix |
| Representation | ALFA short name |
| Allowed In Target | false |
| ALFA Shorthand | None |
| Commutative | false |
Example
/**
* Check the DNS name for the site
*/
rule dnsNameOneAndOnlyExample{
permit
condition stringFromDnsName(dnsNameOneAndOnly(dns))=="example.com:8080"
}In this example, access is permitted if the DNS value is example.com.
Related Functions
Other functions in the Bag functions category: