Beginner query

[Paul Edwards <paul.edwards@identitysolutions.co.nz>]

Hi,

I hope I'm mailing the correct place. 

I am wanting to permit a request, provided certain attributes are
present. I don't care about their value, just the fact that they are
present. I cannot see any way of doing this without implementing my own
match function. Is this correct or have I missed something? I believe my
final policy doc would look like this:

<?xml version="1.0" encoding="UTF-8"?>
<Policy xmlns="urn:oasis:names:tc:xacml:1.0:policy"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";

xsi:schemaLocation="http://www.oasis-open.org/tc/xacml/1.0/cs-xacml-schema=policy-01.xsd";

RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides">
        
	<Description>Policy template for attribute checking</Description>
        
    <!-- This policy document applies to all requests -->      
    <Target>
      <Subjects>
        <AnySubject/>
      </Subjects>
      <Resources>
        <AnyResource/>
      </Resources>
      <Actions>
        <AnyAction/>
      </Actions>
    </Target>      
          
    <!-- Rules for attributes -->      
    <Rule RuleId="EmailRule" Effect="Permit">
      <Description>Allow Email address</Description>
      <Target>
        <Subjects>
          <Subject>
            <ResourceMatch MatchId="isPresent">
              <AttributeValue
DataType="http://www.w3.org/2001/XMLSchema#string";></AttributeValue>
              <SubjectAttributeDesignator
DataType="http://www.w3.org/2001/XMLSchema#anyURI";
                                         AttributeId="emailAddress"/>
            </SubjectMatch>
          </Subject>
        </Subjects>
        <Resources>
          <AnyResource/>
        </Resources>
        <Actions>
          <AnyAction/>
        </Actions>
      </Target>
    </Rule>
 </Policy>

Thanks
P.