2.2.9.10.4.2.1 RIGHT

The RIGHT element describes a right that is assigned to a principal. One or more RIGHT elements MUST be present. It MUST follow one of two forms.

Form 1

<RIGHT name=[[- rightname -]] >
  <CONDITIONLIST>
    [[- timecondition -]]
    <ACCESS>
      <PRINCIPAL>
        <OBJECT>
          <ID type="Unspecified" />
          [[- emailaddress -]]
        </OBJECT>
      </PRINCIPAL> 
    </ACCESS> 
  </CONDITIONLIST>
</RIGHT>

Form 2

<[[- rightname -]] >
   <CONDITIONLIST>
      [[- timecondition -]]
       <ACCESS> 
         <PRINCIPAL>
            <OBJECT>
               <ID type="Unspecified" /> 
                  [[- emailaddress -]] 
               </OBJECT>
         </PRINCIPAL>
      </ACCESS> 
   </CONDITIONLIST>
</[[- rightname -]] >

[[- rightname -]]: In form 1, the name of the RIGHT MUST be an attribute on a RIGHT element and can be any arbitrary RIGHT name. In form 2, the name of the RIGHT MUST be the name of the element and MUST be one of a set of the following reserved values:

• VIEW

• PRINT

• EDIT

• EXPORT

• EXTRACT

[[- timecondition -]]: MAY exist to specify a number of days for which the right may be exercised. If present, this MUST take the following form:

<TIME>
   <INTERVALTIME days="[[- intervaltime -]]" />
</TIME>

[[- intervaltime -]]: MUST be the number of days specified for the time condition.

[[- emailaddress -]]: MUST be a NAME element that contains the primary email address associated with the user's account that possesses the right.