1.1.1 Basic Policy
1.2 Classes
1.2.1 PolicyAction
This is an abstract base class that represents how to form the action clause of a PolicyRule. This consists of a single occurrence of a PolicyStatement, which is of the form: {variable, operator, value} Policy actions have the semantics of "SET variable to value". There are two types of actions:
Applied stereotypes:
- OpenModelClass
- support: MANDATORY
- Experimental
Attribute Name | Type | Mult. | Stereotypes | Description |
keywords | String | 1 | OpenModelAttribute
| This is a string attribute that defines a set of one or more keywords that a policy administrator may use to assist in characterizing or categorizing a policy object to facilitate search operations. The following keywords are pre-defined: Permitted Values: Unknown InstallPermissions ConfigChange InstallMethod Default Error Usage InternalError Security ExternalError Authentication Notification Authorization Publish Accounting Subscribe Auditing Publish-Subscribe Service Exception CustomerFacingService ResourceFacingService Notes: Not present in the ITU specs; the CIM defines a PolicyKeyword attribute, but its semantics are very different.
|
PolicyName | invalid | 1 | OpenModelAttribute
| This is a generic naming attribute that can be used to identify different policy entities. This enables commonName to be used to enforce enterprise or service provider generic naming and this attribute to be used to fine tune the naming of policy entities. Thus, commonName is public in scope and policyName is private to policy. Notes: Not present in the ITU specs or CIM specs.
|
name | String | 1 | OpenModelAttribute
| Represents a user-friendly identifier of an object. It is a (possibly ambiguous) name by which the object is commonly known in some limited scope (such as an organization) and conforms to the naming conventions of the country or culture with which it is associated. It is NOT used as a naming attribute (i.e., to uniquely identify an instance of the object).
|
description | String | 1 | OpenModelAttribute
| This is a string, and defines a textual free-form description of the object. Notes: This attribute doesn't exist in M.3100. The CIM has two attributes for this purpose, Caption (a short description) and Description.
|
id | Identifier | 1 | OpenModelAttribute
| Unambiguously distinguishes different object instances. It is the naming attribute of the object.
|
1.2.2 PolicyActionAtomic
This is the base class for all simple PolicyActions. A simple PolicyAction consists of a single Boolean clause, which is used to perform a single action. This consists of a single occurrence of a PolicyStatement, which is of the form: {SET | CLEAR} PolicyVariable to PolicyValue This is distinctly different from the PolicyActionVendor, which does not use a PolicyStatement. PolicyActionAtomic objects can also be used to form more complex action structures. A PolicyActionComposite object can be used to contain a group of PolicyActionAtomic objects - this grouping enables multiple PolicyActionAtomic objects to be executed as a group. Alternatively, a PolicyActionAtomic object can contain one or more PolicyActionAtomic objects (and also PolicyActionComposite groups if desired) to provide the semantics of a compound PolicyAction. In either case, the aggregation is done using the containedPolicyActions aggregation.
Parent class: PolicyAction
Applied stereotypes:
- OpenModelClass
- support: MANDATORY
- Experimental
Attribute Name | Type | Mult. | Stereotypes | Description |
actionSequenceNumber | Integer | 1 | OpenModelAttribute
| This attribute is a non-negative integer and represents the particular sequence in which this element is executed as part of the overall policy structure. This will allow a policy engine to reference externally supplied arguments to this object as it is executed. Notes: Not present in the ITU specs; CIM 2.7 has a subset of these values.
|
hasExecuted | HasExecuted | 1 | OpenModelAttribute
| This is an enumerated integer that is set by a policy application to define the state of execution of this policyAction. Permited Values: 0: not yet executed 1: executed with no errors 2: executed with errors but successfully rolled back 3: executed with errors and did not roll back 4: did not complete execution but successfully rolled back 5: did not complete execution and did not roll back Notes: Not present in the ITU or CIM specs.
|
hasSubActions | Boolean | 1 | OpenModelAttribute
| This is a Boolean attribute that, if TRUE, signifies that this PolicyAction has one or more sub-actions. Sub-actions are used to enforce a hierarchical nesting of actions, so that parent actions may control the evaluation and other semantics of the sub-actions that they contain. Notes: Not present in the ITU or CIM specs.
|
keywords | String | 1 | OpenModelAttribute
| This is a string attribute that defines a set of one or more keywords that a policy administrator may use to assist in characterizing or categorizing a policy object to facilitate search operations. The following keywords are pre-defined: Permitted Values: Unknown InstallPermissions ConfigChange InstallMethod Default Error Usage InternalError Security ExternalError Authentication Notification Authorization Publish Accounting Subscribe Auditing Publish-Subscribe Service Exception CustomerFacingService ResourceFacingService Notes: Not present in the ITU specs; the CIM defines a PolicyKeyword attribute, but its semantics are very different.
|
policyName | String | 1 | OpenModelAttribute
| This is a generic naming attribute that can be used to identify different policy entities. This enables commonName to be used to enforce enterprise or service provider generic naming and this attribute to be used to fine tune the naming of policy entities. Thus, commonName is public in scope and policyName is private to policy. Notes: Not present in the ITU specs or CIM specs.
|
name | String | 1 | OpenModelAttribute
| Represents a user-friendly identifier of an object. It is a (possibly ambiguous) name by which the object is commonly known in some limited scope (such as an organization) and conforms to the naming conventions of the country or culture with which it is associated. It is NOT used as a naming attribute (i.e., to uniquely identify an instance of the object).
|
description | String | 1 | OpenModelAttribute
| This is a string, and defines a textual free-form description of the object. Notes: This attribute doesn't exist in M.3100. The CIM has two attributes for this purpose, Caption (a short description) and Description.
|
id | Integer | 1 | OpenModelAttribute
| Unambiguously distinguishes different object instances. It is the naming attribute of the object.
|
keywords | String | 1 | OpenModelAttribute
| This is a string attribute that defines a set of one or more keywords that a policy administrator may use to assist in characterizing or categorizing a policy object to facilitate search operations. The following keywords are pre-defined: Permitted Values: Unknown InstallPermissions ConfigChange InstallMethod Default Error Usage InternalError Security ExternalError Authentication Notification Authorization Publish Accounting Subscribe Auditing Publish-Subscribe Service Exception CustomerFacingService ResourceFacingService Notes: Not present in the ITU specs; the CIM defines a PolicyKeyword attribute, but its semantics are very different.
|
PolicyName | invalid | 1 | OpenModelAttribute
| This is a generic naming attribute that can be used to identify different policy entities. This enables commonName to be used to enforce enterprise or service provider generic naming and this attribute to be used to fine tune the naming of policy entities. Thus, commonName is public in scope and policyName is private to policy. Notes: Not present in the ITU specs or CIM specs.
|
name | String | 1 | OpenModelAttribute
| Represents a user-friendly identifier of an object. It is a (possibly ambiguous) name by which the object is commonly known in some limited scope (such as an organization) and conforms to the naming conventions of the country or culture with which it is associated. It is NOT used as a naming attribute (i.e., to uniquely identify an instance of the object).
|
description | String | 1 | OpenModelAttribute
| This is a string, and defines a textual free-form description of the object. Notes: This attribute doesn't exist in M.3100. The CIM has two attributes for this purpose, Caption (a short description) and Description.
|
id | Identifier | 1 | OpenModelAttribute
| Unambiguously distinguishes different object instances. It is the naming attribute of the object.
|
1.2.3 PolicyActionComposite
This attribute is a non-negative integer and represents the particular sequence in which this element is executed as part of the overall policy structure. For example if a composite is part of another composite policy structure. Notes: default is "1"
Parent class: PolicyAction
Applied stereotypes:
- OpenModelClass
- support: MANDATORY
- Experimental
Attribute Name | Type | Mult. | Stereotypes | Description |
actionSequence | Integer | 1 | OpenModelAttribute
|
|
actionExecutionStrategy | PolicyExecutionStrategy | 1 | OpenModelAttribute
| This is an enumerated integer that defines the execution strategy to be used upon the sequenced actions aggregated by this PolicyActionComposite object. Defined execution strategies include: 0: Unknown 1: Do Until Success 2: Do All 3: Do Until Failure 4: Do All Without Failure or Do Nothing "Do Until Success" means that actions should be executed according to their predefined order, until successful execution of a single action. At that point, the process should stop (even if there are additional actions that could be executed). "Do All" means that all actions should be executed that are part of the set, according to their predefined order. This should continue, even if one or more of the actions fails. "Do Until Failure" means that actions should be executed according to their predefined order until an action fails to execute. At that point, the entire sequence should be stopped. Finally, "Do All Without Failure or Do Nothing" means that ALL actions specified should be performed. However, if a failure occurs, then NONE of the actions should be performed. This implies EITHER the ability to look-ahead and ensure that the actions will be able to be performed successfully, or the ability to perform a rollback of that action and all previous actions when an error is encountered.
|
hasSubPolicyActions | Boolean | 1 | OpenModelAttribute
| This is a Boolean attribute that, if TRUE, signifies that this PolicyAction has one or more sub-actions. Sub-actions are used to enforce a hierarchical nesting of actions, so that parent actions may control the evaluation and other semantics of sub-actions that they contain. Notes: Not present in the ITU or CIM specs.
|
actionsCNF | Boolean | 1 | OpenModelAttribute
|
|
keywords | String | 1 | OpenModelAttribute
|
|
policyName | String | 1 | OpenModelAttribute
|
|
name | String | 1 | OpenModelAttribute
| Represents a user-friendly identifier of an object. It is a (possibly ambiguous) name by which the object is commonly known in some limited scope (such as an organization) and conforms to the naming conventions of the country or culture with which it is associated. It is NOT used as a naming attribute (i.e., to uniquely identify an instance of the object).
|
description | String | 1 | OpenModelAttribute
| This is a string, and defines a textual free-form description of the object. Notes: This attribute doesn't exist in M.3100. The CIM has two attributes for this purpose, Caption (a short description) and Description.
|
id | Identifier | 1 | OpenModelAttribute
| Unambiguously distinguishes different object instances. It is the naming attribute of the object.
|
keywords | String | 1 | OpenModelAttribute
| This is a string attribute that defines a set of one or more keywords that a policy administrator may use to assist in characterizing or categorizing a policy object to facilitate search operations. The following keywords are pre-defined: Permitted Values: Unknown InstallPermissions ConfigChange InstallMethod Default Error Usage InternalError Security ExternalError Authentication Notification Authorization Publish Accounting Subscribe Auditing Publish-Subscribe Service Exception CustomerFacingService ResourceFacingService Notes: Not present in the ITU specs; the CIM defines a PolicyKeyword attribute, but its semantics are very different.
|
PolicyName | invalid | 1 | OpenModelAttribute
| This is a generic naming attribute that can be used to identify different policy entities. This enables commonName to be used to enforce enterprise or service provider generic naming and this attribute to be used to fine tune the naming of policy entities. Thus, commonName is public in scope and policyName is private to policy. Notes: Not present in the ITU specs or CIM specs.
|
name | String | 1 | OpenModelAttribute
| Represents a user-friendly identifier of an object. It is a (possibly ambiguous) name by which the object is commonly known in some limited scope (such as an organization) and conforms to the naming conventions of the country or culture with which it is associated. It is NOT used as a naming attribute (i.e., to uniquely identify an instance of the object).
|
description | String | 1 | OpenModelAttribute
| This is a string, and defines a textual free-form description of the object. Notes: This attribute doesn't exist in M.3100. The CIM has two attributes for this purpose, Caption (a short description) and Description.
|
id | Identifier | 1 | OpenModelAttribute
| Unambiguously distinguishes different object instances. It is the naming attribute of the object.
|
1.2.4 PolicyEvent
A PolicyEvent is an occurrence of an important event, and can be used to trigger the evaluation of a PolicyCondition or PolicyCondition clause in a PolicyRule.
Applied stereotypes:
- OpenModelClass
- support: MANDATORY
- Experimental
1.2.5 PolicyGroup
This class is a generalized aggregation container. It enables PolicyRules and/or PolicyGroups to be aggregated in a single container. Note that loops, including the degenerate case of a PolicyGroup that contains itself, are not allowed when PolicyGroups contain other PolicyGroups.
Applied stereotypes:
- OpenModelClass
- support: MANDATORY
- Experimental
Attribute Name | Type | Mult. | Stereotypes | Description |
isMandatoryEvaluation | Boolean | 1 | OpenModelAttribute
| This is a Boolean attribute that, if TRUE, signifies that evaluation (and possibly action execution) of this entity is mandatory and must be attempted. If the Mandatory property value of this entity is FALSE, then the evaluation of this entity is considered to be "best effort" and may be ignored. Notes: Not present in the ITU or CIM specs.
|
usage | String | 1 | OpenModelAttribute
| This is a free-form string attribute that recommends how this policy object should be used. Notes: Not present in the ITU or CIM specs.
|
keywords | String | 1 | OpenModelAttribute
| This is a string attribute that defines a set of one or more keywords that a policy administrator may use to assist in characterizing or categorizing a policy object to facilitate search operations. The following keywords are pre-defined: Permitted Values: Unknown InstallPermissions ConfigChange InstallMethod Default Error Usage InternalError Security ExternalError Authentication Notification Authorization Publish Accounting Subscribe Auditing Publish-Subscribe Service Exception CustomerFacingService ResourceFacingService Notes: Not present in the ITU specs; the CIM defines a PolicyKeyword attribute, but its semantics are very different.
|
policyName | String | 1 | OpenModelAttribute
| This is a generic naming attribute that can be used to identify different policy entities. This enables commonName to be used to enforce enterprise or service provider generic naming and this attribute to be used to fine tune the naming of policy entities. Thus, commonName is public in scope and policyName is private to policy. Notes: Not present in the ITU specs or CIM specs.
|
name | String | 1 | OpenModelAttribute
| Represents a user-friendly identifier of an object. It is a (possibly ambiguous) name by which the object is commonly known in some limited scope (such as an organization) and conforms to the naming conventions of the country or culture with which it is associated. It is NOT used as a naming attribute (i.e., to uniquely identify an instance of the object).
|
description | String | 1 | OpenModelAttribute
| This is a string, and defines a textual free-form description of the object. Notes: This attribute doesn't exist in M.3100. The CIM has two attributes for this purpose, Caption (a short description) and Description.
|
id | Identifier | 1 | OpenModelAttribute
| Unambiguously distinguishes different object instances. It is the naming attribute of the object.
|
1.2.6 PolicyRule
This is a concrete base class for realizing the "event-condition-passaction-failaction" semantics that form a policy rule. The semantics of this rule are that the rule is evaluated when an event occurs. If the condition clause is satisfied, then the pass-action clause will be executed (otherwise, the fail-action clause will be executed). PolicyRules may be nested within PolicyRules. This is often needed in networking (e.g., bandwidth allocation).
Applied stereotypes:
- OpenModelClass
- support: MANDATORY
- Experimental
Attribute Name | Type | Mult. | Stereotypes | Description |
isCNF | Boolean | 1 | OpenModelAttribute
| This is a Boolean attribute that, if TRUE, defines the condition clause of this rule to be represented in Conjunctive Normal Form (e.g., an AND of ORs). If the value of this attribute is FALSE, then the condition clause will be represented in Disjunctive Normal Form (e.g., an OR of ANDs). This attribute controls the setting of how multiple condition clauses (as represented by multiple PolicyConditionComposite objects) are treated in the PolicyRule. As such, it is different from the attribute PolicyConditionComposite.IsCNF, which controls how multiple PolicyConditionAtomic objects are treated in a (single) PolicyConditionComposite object.
|
hasSubRules | Boolean | 1 | OpenModelAttribute
| This is a Boolean attribute that, if TRUE, signifies that this PolicyRule has one or more sub-rules. Sub-rules are used to enforce a hierarchical nesting of rules, so that parent rules may control the execution and other semantics of sub-rules that they contain.
|
isMandatoryEvaluation | Boolean | 1 | OpenModelAttribute
| This is a Boolean attribute that, if TRUE, signifies that evaluation (and possibly action execution) of this entity is mandatory and must be attempted. If the Mandatory property value of this entity is FALSE, then the evaluation of this entity is considered to be "best effort" and may be ignored. Notes: Not present in the ITU or CIM specs.
|
usage | String | 1 | OpenModelAttribute
| This is a free-form string attribute that recommends how this policy object should be used. Notes: Not present in the ITU or CIM specs.
|
keywords | String | 1 | OpenModelAttribute
| This is a string attribute that defines a set of one or more keywords that a policy administrator may use to assist in characterizing or categorizing a policy object to facilitate search operations. The following keywords are pre-defined: Permitted Values: Unknown InstallPermissions ConfigChange InstallMethod Default Error Usage InternalError Security ExternalError Authentication Notification Authorization Publish Accounting Subscribe Auditing Publish-Subscribe Service Exception CustomerFacingService ResourceFacingService Notes: Not present in the ITU specs; the CIM defines a PolicyKeyword attribute, but its semantics are very different.
|
policyName | String | 1 | OpenModelAttribute
| This is a generic naming attribute that can be used to identify different policy entities. This enables commonName to be used to enforce enterprise or service provider generic naming and this attribute to be used to fine tune the naming of policy entities. Thus, commonName is public in scope and policyName is private to policy. Notes: Not present in the ITU specs or CIM specs.
|
name | String | 1 | OpenModelAttribute
| Represents a user-friendly identifier of an object. It is a (possibly ambiguous) name by which the object is commonly known in some limited scope (such as an organization) and conforms to the naming conventions of the country or culture with which it is associated. It is NOT used as a naming attribute (i.e., to uniquely identify an instance of the object).
|
description | String | 1 | OpenModelAttribute
| This is a string, and defines a textual free-form description of the object. Notes: This attribute doesn't exist in M.3100. The CIM has two attributes for this purpose, Caption (a short description) and Description.
|
id | Identifier | 1 | OpenModelAttribute
|
|
1.2.7 PolicyRuleTemplate (PolicyRuleSpec)
This is a concrete base class that is used to define the invariant characteristics (attributes, methods, constraints and relationships) of a PolicyRule entity.
Applied stereotypes:
- OpenModelClass
- support: MANDATORY
- Experimental
Attribute Name | Type | Mult. | Stereotypes | Description |
executionStrategy | PolicyExecutionStrategy | 1 | OpenModelAttribute
| This is an enumerated integer that defines the strategy to be used when executing the sequenced actions aggregated by this PolicyRule. Defined execution strategies include: 0: Unknown 1: Do Until Success 2: Do All 3: Do Until Failure 4: Do All Without Failure or Do Nothing "Do Until Success" means that actions should be executed according to their predefined order, until successful execution of a single action. At that point, the process should stop (even if there are additional actions that could be executed). "Do All" means that all actions should be executed that are part of the set, according to their predefined order. This should continue, even if one or more of the actions fails. "Do Until Failure" means that all actions should be executed according to their predefined order until an action fails to execute. At that point, the entire sequence should be stopped. Finally, "Do All Without Failure or Do Nothing" means that all actions specified should be performed. However, if a failure occurs, then NONE of the actions should be performed. This implies EITHER the ability to look-ahead and ensure that the actions will be able to be performed successfully, or the ability to perform a rollback of that action and all previous actions when an error is encountered.
|
sequencedActions | Integer | 1 | OpenModelAttribute
| This is an enumerated integer defines how the ordering of the PolicyActions associated with this PolicyRule is to be interpreted. Notes: Not present in the ITU or CIM specs (the CIM defined a subset of these values as an attribute in the PolicyRule).
|
policyActionSelectCriteria | String | 1 | OpenModelAttribute
| This is an attribute that contains an OCL expression to prescribe any limitations on the types of PolicyConditions that can be used with any PolicyRules that are derived from this particular PolicyRuleSpec. This enables a PolicyRuleSpec to be built that defines what types of PolicyConditions can be used to build PolicyRules. This in turn ensures that a given set of PolicyRules carry standard functionality. Notes: Not present in the ITU or CIM specs.
|
policyConditionSelectCriteria | String | 1 | OpenModelAttribute
| This is an attribute that contains an OCL expression to prescribe any limitations on the types of PolicyEvents that can be used with any PolicyRules that are derived from this particular PolicyRuleSpec. This enables a PolicyRuleSpec to be built that defines what types of PolicyEvents can be used to trigger the evaluation of PolicyRules. This in turn ensures that a given set of PolicyRules carry standard functionality. Notes: Not present in the ITU or CIM specs.
|
policyEventSelectCriteria | String | 1 | OpenModelAttribute
| This is an attribute that contains an OCL expression to prescribe any limitations on the types of PolicyEvents that can be used with any PolicyRules that are derived from this particular PolicyRuleSpec. This enables a PolicyRuleSpec to be built that defines what types of PolicyEvents can be used to trigger the evaluation of PolicyRules. This in turn ensures that a given set of PolicyRules carry standard functionality. Notes: Not present in the ITU or CIM specs.
|
decisionStrategy | DecisionStrategy | 1 | OpenModelAttribute
| This is an enumerated integer that specifies the particular decision strategy to be used in this PolicySet. Permitted Values: 0: Unknown 1: MatchFirst 2: MatchAll MatchFirst enforces the actions of the first rule that evaluates to TRUE; policy evaluation then STOPS, meaning that all subsequent rules are no longer evaluated. MatchAll enforces the actions of all rules that evaluate to TRUE. This is equivalent to performing two passes through the rule set. The first pass gathers all PolicyRules that evaluate to true and places them in a group. The second pass then executes only those rules that evaluated to true. Execution of these rules is controlled through the Priority property (on the aggregation PolicySetComponent), which defines the order in which the PolicyRules execute.
|
name | String | 1 | OpenModelAttribute
| Represents a user-friendly identifier of an object. It is a (possibly ambiguous) name by which the object is commonly known in some limited scope (such as an organization) and conforms to the naming conventions of the country or culture with which it is associated. It is NOT used as a naming attribute (i.e., to uniquely identify an instance of the object).
|
description | String | 1 | OpenModelAttribute
| his is a string, and defines a textual free-form description of the object. Notes: This attribute doesn't exist in M.3100. The CIM has two attributes for this purpose, Caption (a short description) and Description.
|
id | Identifier | 1 | OpenModelAttribute
| Unambiguously distinguishes different object instances. It is the naming attribute of the object.
|
1.3 Data Types
1.4 Enumerations
1.4.1 DecisionStrategy
This is an enumerated integer that specifies the particular decision strategy to be used in this PolicySet. Permitted Values: 0: Unknown 1: MatchFirst 2: MatchAll MatchFirst enforces the actions of the first rule that evaluates to TRUE; policy evaluation then STOPS, meaning that all subsequent rules are no longer evaluated. MatchAll enforces the actions of all rules that evaluate to TRUE. This is equivalent to performing two passes through the rule set. The first pass gathers all PolicyRules that evaluate to true and places them in a group. The second pass then executes only those rules that evaluated to true. Execution of these rules is controlled through the Priority property (on the aggregation PolicySetComponent), which defines the order in which the PolicyRules execute.
Contains Enumeration Literals:
- 0:
- 1:
- 2:
1.4.2 HasExecuted
This is an enumerated integer that is set by a policy application to define the state of execution of this policyAction. Permited Values: 0: not yet executed 1: executed with no errors 2: executed with errors but successfully rolled back 3: executed with errors and did not roll back 4: did not complete execution but successfully rolled back 5: did not complete execution and did not roll back Notes: Not present in the ITU or CIM specs.
Contains Enumeration Literals:
- 0:
- 1:
- 2:
- 3:
1.4.3 PolicyExecutionStrategy
This is an enumerated integer that defines the strategy to be used when executing the sequenced actions aggregated by this PolicyRule. Defined execution strategies include: 0: Unknown 1: Do Until Success 2: Do All 3: Do Until Failure 4: Do All Without Failure or Do Nothing "Do Until Success" means that actions should be executed according to their predefined order, until successful execution of a single action. At that point, the process should stop (even if there are additional actions that could be executed). "Do All" means that all actions should be executed that are part of the set, according to their predefined order. This should continue, even if one or more of the actions fails. "Do Until Failure" means that all actions should be executed according to their predefined order until an action fails to execute. At that point, the entire sequence should be stopped. Finally, "Do All Without Failure or Do Nothing" means that all actions specified should be performed. However, if a failure occurs, then NONE of the actions should be performed. This implies EITHER the ability to look-ahead and ensure that the actions will be able to be performed successfully, or the ability to perform a rollback of that action and all previous actions when an error is encountered.
Contains Enumeration Literals:
- 0:
- 1:
- 2:
- 3:
- 4: