<?xml version="1.0" encoding="UTF-8"?>
<Policy
xmlns="http://www.rubix.com/2008/RXSPMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.rubix.com/2008/RXSPMLSchema ../common-scripts/RXSPMLSchema.xsd"
PolicyId="xdomain-open" 
RuleCombiningAlgId="ordered-permit-overrides">
	<Description>
		Allow domain2 user to open domain1 object
		Not Applicable for all others
	</Description>
<Target> 
	<Subjects> <Subject>
		<SubjectMatch MatchId="equal">
			<AttributeValue DataType="label">C Baker</AttributeValue>
			<SubjectAttributeDesignator AttributeId="session-label"/>
		</SubjectMatch>	
	</Subject> </Subjects>

	<Actions> <Action>
		<ActionMatch MatchId="equal">
			<AttributeValue DataType="string">open</AttributeValue>
			<ActionAttributeDesignator AttributeId="action-type"/>
		</ActionMatch>	
	</Action> </Actions>
</Target>
	
<Rule RuleId="allow-open" Effect="Permit">
	<Target/> 
</Rule>

</Policy>
