Rules

A rule defines the policy itself by specifying a resource, one or more sets of an action, and values for each action.

• A resource defines the specific object that is being protected. Examples of protected objects are an HTML page on a web site, or a user’s salary information accessed using a human resources service.

• An action is the name of an operation that can be performed on the resource. Examples of web page actions are POST and GET. An allowable action for a human resources service might be canChangeHomeTelephone.

• A value defines the permission for the action. Examples are allow anddeny.