Instance of the te family

Each instance of the te family implements an access control model based on the permissions matrix and the inheritance matrix defined in Type Enforcement terms. These matrices are defined in the configuration of the te family instance.

Family instance configuration

<family-configuration> ::= "{"

<permissions> ","

<types> ","

<images> ","

<allows> ","

<transitions>

"}"

<types> ::= "types" ":" "[" <type> {"," <type>} "]"

<permissions>::= "permissions" ":" "[" <permission>
{"," <permission>} "]"

<images> ::= "images" ":" "[" <image> {"," <image>} "]"

<allows> ::= "allows" ":" "[" <allow> {"," <allow>} "]"

<allow> ::= "{" <source> ":" "{"
<target> ":" <source-permissions> "}"

<source ::= <type>

<target> ::= <type>

<source-permissions> ::= "[ ]" | "[" <permission>
{"," <permission>} "]"

<transitions>::= "transitions" ":" "[" <transition>
{"," <transition>} "]"

<transition> ::= "{" <ancestor> ":" "{"

<child-image> ":" <descendants>

"}"

<ancestor> ::= <type> | "*"

<child-image> ::= <image> | "*"

<descendants> ::= "[ ]" | "[" <descendant> {"," <descendants>} "]"

<descendant> ::= <type> | "*"

Family instance configuration elements

<permissions>	List of possible permissions.
<types>	List of possible types.
<images>	List of possible images.
<allows>	Permissions matrix.
<source>	Type of subject calling the object.
<target>	Type of object that is called.
<source-permissions>	Array of the subject's permissions for the specified object. This can be blank.
<transitions>	Inheritance matrix.
<transition>	Type inheritance rule.
<ancestor>	Parent type. This must be specified in types. The special character "*" matches any of the types listed in types.
<child-image>	Image of the inheritor for the specified parent type. The special character "*" matches any of the images listed in images.
<descendants>	Array of child types for the specified image and parent type. This can be blank.
<descendant>	Possible child type. If the special character "*" is specified, the parent type (<ancestor> element) is used as the value.

Page top