Resource-location

["Tolbert, John W" <john.w.tolbert@boeing.com>]

Hello,

 

Questions for those who have created policies with resource attributes (from section 10.2.6 “Identifiers” in the core, p.97):

 

Has anyone used the following identifier, and if so, for what purpose?:

urn:oasis:names:tc:xacml:1.0:resource:resource-location

 

I am imagining a use case where one might want to direct/restrict certain user groups to specific network locations or environments.  Examples may include production / pre-production / development, or different views of the same resource for different user groups.