ipAddressOneAndOnly Function Description
Description
This function takes in a bag of attributes of type ipAddress and returns a single value. It only works if the bag contains a single value. If the bag contains zero values or more than 1 value than the function will trigger an error yielding Indeterminate. Use this function when you need to compare an attribute to a single value. See example below.
ipAddressOneAndOnly belongs to the ALFA function reference's
Bag functions category. It maps to the XACML function identifier
urn:oasis:names:tc:xacml:2.0:function:ipAddress-one-and-only, takes 1 argument and returns a value of type ipAddress.
| Property | Value |
|---|---|
| Category | Bag functions |
| # Arguments | 1 |
| Arguments |
|
| Return Value | ipAddress |
| Expressed As | pre-fix |
| Representation | ALFA short name |
| Allowed In Target | false |
| ALFA Shorthand | None |
| Commutative | false |
Example
/**
* IP addresses and regular expressions: my two favorite things (ahem)
*/
rule ipAddressOneAndOnlyExample{
permit
condition ipAddressRegexpMatch("127.0.0.1",ipAddressOneAndOnly(webIpAddress))
}In this example, access is permitted if the submitted IP address matches 127.0.0.1
Related Functions
Other functions in the Bag functions category: