timeOneAndOnly Function Description
Description
This function takes in a bag of attributes of type time and returns a single value. It only works if the bag contains a single value. If the bag contains zero values or more than 1 value than the function will trigger an error yielding Indeterminate. Use this function when you need to compare an attribute to a single value. See example below.
timeOneAndOnly belongs to the ALFA function reference's
Bag functions category. It maps to the XACML function identifier
urn:oasis:names:tc:xacml:1.0:function:time-one-and-only, takes 1 argument and returns a value of type time.
| Property | Value |
|---|---|
| Category | Bag functions |
| # Arguments | 1 |
| Arguments |
|
| Return Value | time |
| Expressed As | pre-fix |
| Representation | ALFA short name |
| Allowed In Target | false |
| ALFA Shorthand | None |
| Commutative | false |
Example
/**
* Allow at night
*/
rule timeOneAndOnlyExample{
permit
condition timeInRange(timeOneAndOnly(Attributes.currentTime), "22:00:00":time, "06:00:00":time)
}
In this example, access is permitted during nighttime.
Related Functions
Other functions in the Bag functions category: