<?xml version="1.0" encoding="UTF-8"?>
<PolicySet PolicyCombiningAlgId="urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides" PolicySetId="urn:elga:bes:2013:1.2.3.1.1" xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os http://docs.oasis-open.org/xacml/2.0/
    access_control-xacml-2.0-policy-schema-os.xsd">
    <Description>The general request policy</Description>
    <Target/>
    <PolicySetIdReference>urn:elga:bes:2013:1.2.3.3.1.101.1</PolicySetIdReference>
    <PolicySet PolicyCombiningAlgId="urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides" 
        PolicySetId="urn:elga:bes:2013:1.2.3.2.4"
        xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os http://docs.oasis-open.org/xacml/
        access_control-xacml-2.0-policy-schema-os.xsd">
        <Description>This Policy denies access to specific services</Description>
        <Target/>
        <Policy PolicyId="urn:elga:bes:2013:1.2.3.2.2.4" 
            RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides">
            <Target>
                <Resources>
                    <Resource xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os">
                        <ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                            <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">102</AttributeValue>
                            <ResourceAttributeDesignator AttributeId="urn:elga:bes:2013:service" 
                                DataType="http://www.w3.org/2001/XMLSchema#string"/>
                        </ResourceMatch>
                    </Resource>
                </Resources>
            </Target>
            <Rule Effect="Deny" RuleId="urn:elga:bes:2013:denyrule"/>
        </Policy>
    </PolicySet>
    <PolicyIdReference xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os">
       urn:elga:bes:2013:1.2.3.3.1.102.1</PolicyIdReference>
</PolicySet>
