<?xml version="1.0" encoding="UTF-8"?>
<Policy
      xmlns="urn:oasis:names:tc:xacml:1.0:policy"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation="urn:oasis:names:tc:xacml:1.0:policy
        cs-xacml-schema-policy-01.xsd"
      PolicyId="urn:oasis:names:tc:xacml:1.0:conformance-test:IIC223:policy"
      RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides">
    <Description>
        Policy for Conformance Test IIC223.
    </Description>
    <Target>
        <Subjects>
            <AnySubject/>
        </Subjects>
        <Resources>
            <AnyResource/>
        </Resources>
        <Actions>
            <AnyAction/>
        </Actions>
    </Target>
    <Rule
          RuleId="urn:oasis:names:tc:xacml:1.0:conformance-test:IIC223:rule"
          Effect="Permit">
        <Condition FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal">
            <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:hexBinary-bag-size">
                <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:hexBinary-union">
                    <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:hexBinary-bag">
                        <AttributeValue
                              DataType="http://www.w3.org/2001/XMLSchema#hexBinary">0BF7A9876CDE</AttributeValue>
                        <AttributeValue
                              DataType="http://www.w3.org/2001/XMLSchema#hexBinary">0BF7A9876CAB</AttributeValue>
                    </Apply>
                    <SubjectAttributeDesignator
                          AttributeId="urn:oasis:names:tc:xacml:1.0:conformance-test:test-attr"
                          DataType="http://www.w3.org/2001/XMLSchema#hexBinary"/>
                </Apply>
            </Apply>
            <AttributeValue
                  DataType="http://www.w3.org/2001/XMLSchema#integer">2</AttributeValue>
        </Condition>
    </Rule>
</Policy>

