MINI MINI MANI MO

<schema xmlns="http://www.w3.org/2001/XMLSchema" 
        targetNamespace="http://xmlns.oracle.com/xdb/acl.xsd" version="1.0"
        xmlns:xdb="http://xmlns.oracle.com/xdb"
        xmlns:xdbacl="http://xmlns.oracle.com/xdb/acl.xsd"
        elementFormDefault="qualified">

   <annotation>
     <documentation>
        This XML schema describes the structure of XDB ACL documents.
        
        Note : The "systemPrivileges" element below lists all supported 
          system privileges and their aggregations.
          See dav.xsd for description of DAV privileges
        Note : The elements and attributes marked "hidden" are for
          internal use only.
     </documentation>
     <appinfo>
       <xdb:systemPrivileges>
        <xdbacl:all>
          <xdbacl:read-properties/>
          <xdbacl:read-contents/>
          <xdbacl:read-acl/>
          <xdbacl:update/>
          <xdbacl:link/>
          <xdbacl:unlink/>
          <xdbacl:unlink-from/>
          <xdbacl:write-acl-ref/>
          <xdbacl:update-acl/>
          <xdbacl:link-to/>
          <xdbacl:resolve/>
          <xdbacl:write-config/>
        </xdbacl:all>
       </xdb:systemPrivileges>
     </appinfo>
   </annotation>

  <!-- privilegeNameType (this is an emptycontent type) -->
  <complexType name = "privilegeNameType"/>

  <!-- privilegeName element 
       All system and user privileges are in the substitutionGroup 
       of this element. 
    -->
  <element name = "privilegeName" type="xdbacl:privilegeNameType"
           xdb:defaultTable=""/>

  <!-- all system privileges in the XDB ACL namespace -->
  <element name = "read-properties" type="xdbacl:privilegeNameType"
           substitutionGroup="xdbacl:privilegeName" xdb:defaultTable=""/>
  <element name = "read-contents" type="xdbacl:privilegeNameType"
           substitutionGroup="xdbacl:privilegeName" xdb:defaultTable=""/>
  <element name = "read-acl" type="xdbacl:privilegeNameType"
           substitutionGroup="xdbacl:privilegeName" xdb:defaultTable=""/>
  <element name = "update" type="xdbacl:privilegeNameType"
           substitutionGroup="xdbacl:privilegeName" xdb:defaultTable=""/>
  <element name = "link" type="xdbacl:privilegeNameType"
           substitutionGroup="xdbacl:privilegeName" xdb:defaultTable=""/>
  <element name = "unlink" type="xdbacl:privilegeNameType"
           substitutionGroup="xdbacl:privilegeName" xdb:defaultTable=""/>
  <element name = "unlink-from" type="xdbacl:privilegeNameType"
           substitutionGroup="xdbacl:privilegeName" xdb:defaultTable=""/>
  <element name = "write-acl-ref" type="xdbacl:privilegeNameType"
           substitutionGroup="xdbacl:privilegeName" xdb:defaultTable=""/>
  <element name = "update-acl" type="xdbacl:privilegeNameType"
           substitutionGroup="xdbacl:privilegeName" xdb:defaultTable=""/>
  <element name = "link-to" type="xdbacl:privilegeNameType"
           substitutionGroup="xdbacl:privilegeName" xdb:defaultTable=""/>
  <element name = "resolve" type="xdbacl:privilegeNameType"
           substitutionGroup="xdbacl:privilegeName" xdb:defaultTable=""/>
  <element name = "all" type="xdbacl:privilegeNameType"
           substitutionGroup="xdbacl:privilegeName" xdb:defaultTable=""/>

  <!-- privilege element -->
  <element name = "privilege" xdb:defaultTable="">
    <complexType> 
      <sequence>
        <any maxOccurs="unbounded" processContents="lax"/>
      </sequence>
    </complexType>
  </element>

  <!-- ace element -->
  <element name = "ace" xdb:defaultTable="">
    <complexType> 
      <sequence>
        <element name = "grant" type = "boolean"/>
        <choice>
          <element name="invert" xdb:transient="generated">
            <complexType>
              <sequence>
                <element name="principal" type="string"
                         xdb:transient="generated" />
              </sequence>
            </complexType>
          </element>
          <element name="principal" type="string" xdb:transient="generated"/>
        </choice>
        <element ref="xdbacl:privilege" minOccurs="1"/>
        <!-- "any" contain all app info for an ACE e.g.reason for creation -->
        <any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax"/>
        <!-- HIDDEN ELEMENTS -->
        <choice minOccurs="0">
          <element name = "principalID" type = "hexBinary"
                   xdb:baseProp="true" xdb:hidden="true"/>
          <element name = "principalString" type = "string"
                   xdb:baseProp="true" xdb:hidden="true"/>
        </choice>
        <element name = "flags" type = "unsignedInt" minOccurs="0" 
                 xdb:baseProp="true" xdb:hidden="true"/>
      </sequence> 
      <attribute name = "collection" type = "boolean" 
                 xdb:transient="generated" use="optional"/>
      <attribute name = "principalFormat" 
                 xdb:transient="generated" use="optional">
        <simpleType>
          <restriction base="string">
            <enumeration value="ShortName"/>
            <enumeration value="DistinguishedName"/>
            <enumeration value="GUID"/>
            <enumeration value="XSName"/>
          </restriction>    
        </simpleType>
      </attribute>
      <attribute name = "start_date" type = "dateTime" use = "optional"/>
      <attribute name = "end_date" type = "dateTime" use = "optional"/>     
    </complexType>
  </element>

  <!-- acl element -->
  <complexType name="inheritanceType">
    <attribute name="type" type="string" use="required"/>
    <attribute name="href" type="string" use="required"/>
  </complexType>

  <complexType name="aclType"> 
   <sequence>
    <element name = "schemaURL" type = "string" minOccurs="0"
             xdb:transient="generated"/>
    <element name = "elementName" type = "string" minOccurs="0" 
             xdb:transient="generated"/>
    <element name = "security-class" type = "QName" minOccurs="0"/>
    <choice minOccurs="0">
      <element name="extends-from" type="xdbacl:inheritanceType"/>
      <element name="constrained-with" type="xdbacl:inheritanceType"/>
    </choice>
    <element ref = "xdbacl:ace" minOccurs="0" maxOccurs = "unbounded"/>
    <!-- this "any" contains all application specific info for an ACL, 
         e.g., reason for creation  -->
    <any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax"/>
    <!-- HIDDEN ELEMENTS -->
    <element name = "schemaOID" type = "hexBinary" minOccurs="0"
             xdb:baseProp="true" xdb:hidden="true"/>
    <element name = "elementNum" type = "unsignedInt" minOccurs="0"
             xdb:baseProp="true" xdb:hidden="true"/>
   </sequence>
   <attribute name = "shared" type = "boolean" default="true"/>
   <attribute name = "description" type = "string"/>
  </complexType>
  <complexType name="rule-based-acl">
    <complexContent>
      <extension base="xdbacl:aclType">
        <sequence>
          <element name = "param" minOccurs="0" maxOccurs="unbounded">
            <complexType> 
              <simpleContent>
                <extension base="string">
                  <attribute name = "name" type = "string" use = "required"/>
                </extension>
              </simpleContent>
            </complexType>
          </element>
        </sequence>
      </extension>
    </complexContent>
  </complexType>
  <element name = "acl" type="xdbacl:aclType" xdb:defaultTable = "XDB$ACL"/>

  <element name = "write-config" type="xdbacl:privilegeNameType"
           substitutionGroup="xdbacl:privilegeName" xdb:defaultTable=""/>
 </schema>