xcaml policyviz samples

x.dot

digraph g {compound="true";bgcolor="";fontcolor="";fontname="";fontsize="";label="";margin="";nodesep="";rankdir="LR";ranksep="";ratio="";size="";node[label="PolicySet::Organization-TEAM-permissions-tests", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n1};node[shape="record",label="{<n2> fn:string-equal | <n4> :pe-service-name | <n3> #string:team.4}",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct0};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n1 -> struct0:n2;node[label="Policy::View-user-sysid-whitelist-check", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n8};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n1 -> n8;node[shape="record",label="{<n9> fn:string-equal | <n11> :action-id | <n10> #string:viewSYSTEMSID}",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct1};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n8 -> struct1:n9;subgraph cluster_n16{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::view-check-whitelist", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n15};node[shape="record",label="{<n17> fn:string-equal | <n19> :whitelist-sysid | <n18> #string:Allow}",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct2};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n15 -> struct2:n17;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct1:n10 -> n15;subgraph cluster_n24{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::ViewSYSTEMSID-denied", color="red",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="octagon",style="filled",URL="",width="",] {n23};subgraph cluster_n25{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:team:xacml:advice:uid-sysid:message", color="salmon",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtrapezium",style="filled",URL="",width="",] {n26};subgraph cluster_n27{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:message";labeljust="";labelloc="";style="";node[label="#string:You do not have permission to access data related to this SYSTEMS ID. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n28};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct1:n10 -> n26;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct1:n10 -> n23;node[label="PolicySet::Feed-related-provisioning-Policies", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n29};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n1 -> n29;node[shape="record",label="{<n30> fn:string-equal | <n32> :action-id | <n31> #string:create}",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct3};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n29 -> struct3:n30;node[label="OR", color="purple",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="circle",style="",URL="",width="",] {n34};node[shape="record",label="{<n35> fn:string-equal | <n37> :action-id | <n36> #string:modify}",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct4};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct3:n31 -> n34;edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n34 -> struct4:n35;node[label="OR", color="purple",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="circle",style="",URL="",width="",] {n39};node[shape="record",label="{<n40> fn:string-equal | <n42> :action-id | <n41> #string:delete}",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct5};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct4:n36 -> n39;edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n39 -> struct5:n40;node[label="Policy::Must-Be-an-Employee", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n46};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n29 -> n46;subgraph cluster_n48{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::You-Are-an-Employee", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n47};node[shape="record",label="{<n49> fn:string-equal | <n51> :status | <n50> #string:EMPLOYEE }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct6};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n47 -> struct6:n49;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n46 -> n47;subgraph cluster_n56{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Not-an-Employee", color="red",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="octagon",style="filled",URL="",width="",] {n55};subgraph cluster_n57{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:xacml:advice:employeeonly", color="salmon",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtrapezium",style="filled",URL="",width="",] {n58};subgraph cluster_n59{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:message";labeljust="";labelloc="";style="";node[label="#string:You must be an Company employee. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n60};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n46 -> n58;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n46 -> n55;node[label="PolicySet::Provisioning-Policies", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n61};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n29 -> n61;node[label="PolicySet::Publishing-Policies", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n62};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n61 -> n62;node[shape="record",label="{<n63> fn:string-equal | <n65> :provision | <n64> #string:source}",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct7};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n62 -> struct7:n63;node[label="Policy::Publishers-must-own-or-admin-their-source", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n69};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n62 -> n69;subgraph cluster_n71{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Publish-owns-or-admins-the-data-source", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n70};node[shape="record",label="{<n72> fn:boolean-equal | <n74> :admin | <n73> #boolean:true }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct8};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n70 -> struct8:n72;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n69 -> n70;subgraph cluster_n79{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Publish-does-not-own-or-admin-source", color="red",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="octagon",style="filled",URL="",width="",] {n78};subgraph cluster_n80{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:xacml:advice:mustown", color="salmon",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtrapezium",style="filled",URL="",width="",] {n81};subgraph cluster_n82{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:message";labeljust="";labelloc="";style="";node[label="#string:You must own or admin the data source. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n83};}subgraph cluster_n84{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:url";labeljust="";labelloc="";style="";node[label="#anyURI: http://www.company.com ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n85};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n69 -> n81;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n69 -> n78;node[label="PolicySet::Publish-Create-Modify-Delete-source-policies", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n86};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n62 -> n86;node[shape="record",label="{<n87> fn:string-equal | <n89> :action-id | <n88> #string:create }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct9};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n86 -> struct9:n87;node[label="OR", color="purple",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="circle",style="",URL="",width="",] {n91};node[shape="record",label="{<n92> fn:string-equal | <n94> :action-id | <n93> #string:modify }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct10};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct9:n88 -> n91;edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n91 -> struct10:n92;node[label="OR", color="purple",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="circle",style="",URL="",width="",] {n96};node[shape="record",label="{<n97> fn:string-equal | <n99> :action-id | <n98> #string:delete }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct11};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct10:n93 -> n96;edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n96 -> struct11:n97;node[label="Policy::Publish-Unrestricted-source-classifications", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n103};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n86 -> n103;node[shape="record",label="{<n104> fn:string-equal | <n106> :classification | <n105> #string:Company Proprietary (Internal Use Only) }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct12};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n103 -> struct12:n104;node[label="OR", color="purple",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="circle",style="",URL="",width="",] {n108};node[shape="record",label="{<n109> fn:string-equal | <n111> :classification | <n110> #string:Non-Sensitive Customer Data }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct13};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct12:n105 -> n108;edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n108 -> struct13:n109;subgraph cluster_n116{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Publish-Unrestricted-source-Permit", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n115};}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct13:n110 -> n115;node[label="Policy::Pubish-Secure-Restricted-source-classifications", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n117};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n86 -> n117;node[shape="record",label="{<n118> fn:string-equal | <n120> :classification | <n119> #string:Company Proprietary (Secure Restricted) }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct14};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n117 -> struct14:n118;subgraph cluster_n125{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Publish-Secure-Restricted-source-Deny", color="red",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="octagon",style="filled",URL="",width="",] {n124};subgraph cluster_n126{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:division:xacml:advice:secure_restricted", color="salmon",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtrapezium",style="filled",URL="",width="",] {n127};subgraph cluster_n128{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:message";labeljust="";labelloc="";style="";node[label="#string:Company Proprietary (Secure Restricted) data should NOT go through the Project. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n129};}subgraph cluster_n130{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:url";labeljust="";labelloc="";style="";node[label="#anyURI: http://dataprotection.division.company.com/Classification/SecureRestricted.html ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n131};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct14:n119 -> n127;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct14:n119 -> n124;node[label="Policy::Publish-Restricted-source-classification", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n132};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n86 -> n132;node[shape="record",label="{<n133> fn:string-equal | <n135> :classification | <n134> #string:Company Proprietary (Restricted) }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct15};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n132 -> struct15:n133;subgraph cluster_n140{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Publish-Restricted-source-Permit", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n139};node[shape="record",label="{<n141> fn:boolean-equal | <n143> :encrypted | <n142> #boolean:true }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct16};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n139 -> struct16:n141;subgraph cluster_n147{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:division:xacml:obligation:ABC-001", color="#AAFFAA",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invhouse",style="filled",URL="",width="",] {n148};subgraph cluster_n149{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:obligation:ABC-001:url";labeljust="";labelloc="";style="";node[label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d23372 ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n150};}subgraph cluster_n151{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:obligation:ABC-001:message";labeljust="";labelloc="";style="";node[label="#string:Please oblige to follow Company Company Policy regarding the encryption of transmitted data. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n152};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct16:n142 -> n148;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct15:n134 -> n139;subgraph cluster_n154{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Publish-Restricted-source-encryption", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n153};subgraph cluster_n155{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:division:xacml:obligation:ABC-001:exception", color="#AAFFAA",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invhouse",style="filled",URL="",width="",] {n156};subgraph cluster_n157{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:obligation:ABC-001:exception:url";labeljust="";labelloc="";style="";node[label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d23372 ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n158};}subgraph cluster_n159{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:obligation:ABC-001:exception:message";labeljust="";labelloc="";style="";node[label="#string:Please oblige that you have documented approval to transmit Restricted data unencrypted and will provide such documentation upon audit. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n160};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct15:n134 -> n156;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct15:n134 -> n153;node[label="Policy::Publish-Sensitive-source-classifications", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n161};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n86 -> n161;node[shape="record",label="{<n162> fn:string-equal | <n164> :classification | <n163> #string:Company Proprietary (Sensitive Personal Information) }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct17};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n161 -> struct17:n162;node[label="OR", color="purple",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="circle",style="",URL="",width="",] {n166};node[shape="record",label="{<n167> fn:string-equal | <n169> :classification | <n168> #string:Sensitive Customer Data }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct18};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct17:n163 -> n166;edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n166 -> struct18:n167;node[label="OR", color="purple",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="circle",style="",URL="",width="",] {n171};node[shape="record",label="{<n172> fn:string-equal | <n174> :classification | <n173> #string:Customer Data Through A Conduit }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct19};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct18:n168 -> n171;edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n171 -> struct19:n172;subgraph cluster_n179{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Publish-Sensitive-is-encrypted", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n178};node[shape="record",label="{<n180> fn:boolean-equal | <n182> :encrypted | <n181> #boolean:true }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct20};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n178 -> struct20:n180;subgraph cluster_n186{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:division:xacml:obligation:ABC-001", color="#AAFFAA",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invhouse",style="filled",URL="",width="",] {n187};subgraph cluster_n188{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:obligation:ABC-001:url";labeljust="";labelloc="";style="";node[label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3dfr3221%26Id%3d234234 ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n189};}subgraph cluster_n190{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:obligation:ABC-001:message";labeljust="";labelloc="";style="";node[label="#string:Please oblige to follow Company Company Policy regarding the encryption of transmitted data. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n191};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct20:n181 -> n187;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct19:n173 -> n178;subgraph cluster_n193{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Publish-Sensitive-must-be-encrypted", color="red",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="octagon",style="filled",URL="",width="",] {n192};subgraph cluster_n194{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:division:xacml:advice:ABC-001", color="salmon",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtrapezium",style="filled",URL="",width="",] {n195};subgraph cluster_n196{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:advice:ABC-001:url";labeljust="";labelloc="";style="";node[label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d23372 ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n197};}subgraph cluster_n198{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:advice:ABC-001:message";labeljust="";labelloc="";style="";node[label="#string:Please follow Company Company Policy regarding the encryption of transmitted data. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n199};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct19:n173 -> n195;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct19:n173 -> n192;node[label="Policy::Publish-no-source-classification-given", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n200};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n86 -> n200;subgraph cluster_n202{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Publish-no-source-classification-deny", color="red",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="octagon",style="filled",URL="",width="",] {n201};subgraph cluster_n203{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:division:xacml:advice:mustclassify", color="salmon",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtrapezium",style="filled",URL="",width="",] {n204};subgraph cluster_n205{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:message";labeljust="";labelloc="";style="";node[label="#string:All data sources must be classified according to XYZP. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n206};}subgraph cluster_n207{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:url";labeljust="";labelloc="";style="";node[label="#anyURI: http://dataprotection.division.company.com/default-new.html ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n208};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n200 -> n204;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n200 -> n201;node[label="PolicySet::Subscriber-Policies", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n209};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n61 -> n209;node[shape="record",label="{<n210> fn:string-equal | <n212> :provision | <n211> #string:subscription }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct21};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n209 -> struct21:n210;node[label="Policy::Subscribe-must-own-or-admin-subscription", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n216};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n209 -> n216;node[shape="record",label="{<n217> fn:string-equal | <n219> :action-id | <n218> #string:modify }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct22};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n216 -> struct22:n217;node[label="OR", color="purple",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="circle",style="",URL="",width="",] {n221};node[shape="record",label="{<n222> fn:string-equal | <n224> :action-id | <n223> #string:delete }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct23};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct22:n218 -> n221;edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n221 -> struct23:n222;subgraph cluster_n229{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Subscribe-owns-or-admins", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n228};node[shape="record",label="{<n230> fn:boolean-equal | <n232> :admin | <n231> #boolean:true }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct24};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n228 -> struct24:n230;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct23:n223 -> n228;subgraph cluster_n237{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Subscribe-does-not-own-or-admin", color="red",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="octagon",style="filled",URL="",width="",] {n236};subgraph cluster_n238{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:xacml:advice:mustown", color="salmon",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtrapezium",style="filled",URL="",width="",] {n239};subgraph cluster_n240{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:message";labeljust="";labelloc="";style="";node[label="#string:You must own or admin the subscription. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n241};}subgraph cluster_n242{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:url";labeljust="";labelloc="";style="";node[label="#anyURI: http://www.company.com ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n243};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct23:n223 -> n239;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct23:n223 -> n236;node[label="Policy::Subscribe-must-be-publisher-if-private", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n244};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n209 -> n244;subgraph cluster_n245{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:team:xacml:advice:private:message", color="salmon",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtrapezium",style="filled",URL="",width="",] {n246};subgraph cluster_n247{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:message";labeljust="";labelloc="";style="";node[label="#string:This source is designated as private. You must ask the publisher to create a subscription for you. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n248};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n244 -> n246;subgraph cluster_n250{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Subscribe-source-is-not-private", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n249};node[shape="record",label="{<n251> fn:boolean-equal | <n253> :private | <n252> #boolean:false }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct25};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n249 -> struct25:n251;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n244 -> n249;subgraph cluster_n258{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Subscribe-check-privacy-true-and-subscriber-is-publisher", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n257};node[shape="record",label="{<n259> fn:boolean-equal | <n261> :private | <n260> #boolean:true }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct26};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n257 -> struct26:n259;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n244 -> n257;subgraph cluster_n265{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";subgraph cluster_n267{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="apply::string-is-in", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtriangle",style="",URL="",width="",] {n266};subgraph cluster_n269{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="apply::string-one-and-only", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtriangle",style="",URL="",width="",] {n268};node[shape="record",label="<n270> #string | <n271> :access-subject | <n272> :subject-id",color="lightblue",fillcolor="",fontcolor="",fontname="",fontsize="",height="",style="",URL="",width="",]{struct27};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n268 -> struct27:n272;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n266 -> n268;node[shape="record",label="<n273> #string | <n274> :resource | <n275> :publisher",color="lightblue",fillcolor="",fontcolor="",fontname="",fontsize="",height="",style="",URL="",width="",]{struct28};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n266 -> struct28:n275;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct26:n260 -> n266;}node[label="PolicySet::Subscribe-creation-Policies", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n276};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n209 -> n276;node[shape="record",label="{<n277> fn:string-equal | <n279> :action-id | <n278> #string:create }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct29};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n276 -> struct29:n277;node[label="Policy::Subscribe-create-nrestricted-source-classifications", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n283};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n276 -> n283;node[shape="record",label="{<n284> fn:string-equal | <n286> :classification | <n285> #string:Company Proprietary (Internal Use Only) }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct30};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n283 -> struct30:n284;node[label="OR", color="purple",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="circle",style="",URL="",width="",] {n288};node[shape="record",label="{<n289> fn:string-equal | <n291> :classification | <n290> #string:Non-Sensitive Customer Data }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct31};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct30:n285 -> n288;edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n288 -> struct31:n289;subgraph cluster_n296{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Subscribe-create-unrestricted-permit", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n295};}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct31:n290 -> n295;node[label="Policy::Subscribe-create-Secure-Restricted-classifications", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n297};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n276 -> n297;node[shape="record",label="{<n298> fn:string-equal | <n300> :classification | <n299> #string:Company Proprietary (Secure Restricted) }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct32};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n297 -> struct32:n298;subgraph cluster_n305{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Subscribe-Secure-Restricted-Deny", color="red",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="octagon",style="filled",URL="",width="",] {n304};subgraph cluster_n306{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:division:xacml:advice:secure_restricted", color="salmon",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtrapezium",style="filled",URL="",width="",] {n307};subgraph cluster_n308{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:message";labeljust="";labelloc="";style="";node[label="#string:Company Proprietary (Secure Restricted) data should NOT go through the Project. This Data Feed should NOT have this classification. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n309};}subgraph cluster_n310{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:url";labeljust="";labelloc="";style="";node[label="#anyURI: http://dataprotection.division.company.com/Classification/SecureRestricted.html ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n311};}subgraph cluster_n312{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:email";labeljust="";labelloc="";style="";node[label="#anyURI: mailto:dplr@company.com ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n313};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct32:n299 -> n307;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct32:n299 -> n304;node[label="Policy::Subscribe-create-Restricted-source-classifications", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n314};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n276 -> n314;node[shape="record",label="{<n315> fn:string-equal | <n317> :classification | <n316> #string:Company Proprietary (Restricted) }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct33};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n314 -> struct33:n315;subgraph cluster_n322{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Subscribe-create-Restricted-is-encrypted", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n321};node[shape="record",label="{<n323> fn:boolean-equal | <n325> :encrypted | <n324> #boolean:true }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct34};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n321 -> struct34:n323;subgraph cluster_n329{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:division:xacml:obligation:XYZP-4213", color="#AAFFAA",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invhouse",style="filled",URL="",width="",] {n330};subgraph cluster_n331{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:obligation:XYZP-4213:url";labeljust="";labelloc="";style="";node[label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d54321 ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n332};}subgraph cluster_n333{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:obligation:XYZP-4213:message";labeljust="";labelloc="";style="";node[label="#string:Please oblige to follow Company Company Policy regarding the encryption of data at rest. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n334};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct34:n324 -> n330;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct33:n316 -> n321;subgraph cluster_n336{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Subscribe-create-Restricted-should-be-encrypted", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n335};subgraph cluster_n337{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:division:xacml:obligation:XYZP-4213:exception", color="#AAFFAA",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invhouse",style="filled",URL="",width="",] {n338};subgraph cluster_n339{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:obligation:XYZP-4213:exception:url";labeljust="";labelloc="";style="";node[label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d54321 ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n340};}subgraph cluster_n341{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:obligation:XYZP-4213:exception:message";labeljust="";labelloc="";style="";node[label="#string:Please oblige that you have documented approval to store Restricted data unencrypted and will provide such documentation upon audit. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n342};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct33:n316 -> n338;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct33:n316 -> n335;node[label="Policy::Subscribe-create-Sensitive-source-classifications", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n343};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n276 -> n343;node[shape="record",label="{<n344> fn:string-equal | <n346> :classification | <n345> #string:Company Proprietary (Sensitive Personal Information) }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct35};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n343 -> struct35:n344;node[label="OR", color="purple",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="circle",style="",URL="",width="",] {n348};node[shape="record",label="{<n349> fn:string-equal | <n351> :classification | <n350> #string:Sensitive Customer Data }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct36};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct35:n345 -> n348;edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n348 -> struct36:n349;node[label="OR", color="purple",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="circle",style="",URL="",width="",] {n353};node[shape="record",label="{<n354> fn:string-equal | <n356> :classification | <n355> #string:Customer Data Through A Conduit }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct37};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct36:n350 -> n353;edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n353 -> struct37:n354;subgraph cluster_n361{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Subscribe-create-Sensitive-is-encrypted", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n360};node[shape="record",label="{<n362> fn:boolean-equal | <n364> :encrypted | <n363> #boolean:true }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct38};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n360 -> struct38:n362;subgraph cluster_n368{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:division:xacml:obligation:XYZP-4213", color="#AAFFAA",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invhouse",style="filled",URL="",width="",] {n369};subgraph cluster_n370{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:obligation:XYZP-4213:url";labeljust="";labelloc="";style="";node[label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d54321 ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n371};}subgraph cluster_n372{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:obligation:XYZP-4213:message";labeljust="";labelloc="";style="";node[label="#string:Please oblige to follow Company Company Policy regarding the encryption of data at rest. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n373};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct38:n363 -> n369;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct37:n355 -> n360;subgraph cluster_n375{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Subscribe-create-Sensitive-must-be-encrypted", color="red",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="octagon",style="filled",URL="",width="",] {n374};subgraph cluster_n376{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:division:xacml:advice:XYZP-4213", color="salmon",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtrapezium",style="filled",URL="",width="",] {n377};subgraph cluster_n378{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:advice:XYZP-4213:url";labeljust="";labelloc="";style="";node[label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d54321 ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n379};}subgraph cluster_n380{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:division:xacml:advice:XYZP-4213:message";labeljust="";labelloc="";style="";node[label="#string:Please follow Company Company Policy regarding the encryption of data at rest. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n381};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct37:n355 -> n377;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct37:n355 -> n374;node[label="Policy::Subscribe-create-No-data-source-classification-given", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n382};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n276 -> n382;subgraph cluster_n384{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Subscribe-create-No-data-source-classification-deny", color="red",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="octagon",style="filled",URL="",width="",] {n383};subgraph cluster_n385{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:division:xacml:advice:mustclassify", color="salmon",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtrapezium",style="filled",URL="",width="",] {n386};subgraph cluster_n387{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:message";labeljust="";labelloc="";style="";node[label="#string:All data sources must be classified according to XYZP. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n388};}subgraph cluster_n389{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:advice:url";labeljust="";labelloc="";style="";node[label="#anyURI: http://dataprotection.division.company.com/default-new.html ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n390};}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n382 -> n386;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n382 -> n383;node[label="Policy::Subscribe-create-White-List-Check-Policy", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n391};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n209 -> n391;node[shape="record",label="{<n392> fn:string-equal | <n394> :action-id | <n393> #string:create }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct39};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n391 -> struct39:n392;subgraph cluster_n398{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="";node[label="urn:com:company:project:team:subscriber:access", color="salmon",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invhouse",style="filled",URL="",width="",] {n399};subgraph cluster_n400{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:obligation:message";labeljust="";labelloc="";style="";node[label="#string:You must request access to subscribe to this source. ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n401};}subgraph cluster_n402{bgcolor="";color="lightgrey";fillcolor="";fontcolor="";fontname="";fontsize="";label="urn:com:company:xacml:obligation:email";labeljust="";labelloc="";style="";subgraph cluster_n404{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="apply::string-concatenate", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtriangle",style="",URL="",width="",] {n403};node[label="#string: mailto://g27477@company.com?subject=Feed%20Access%20Request&body=http://zzz.vvv.company.com:9080/TeamPipAdmin/CreateObsForm%3FsysUid%3D ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n405};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n403 -> n405;subgraph cluster_n407{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="apply::string-one-and-only", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtriangle",style="",URL="",width="",] {n406};node[shape="record",label="<n408> #string | <n409> :access-subject | <n410> :subject-id",color="lightblue",fillcolor="",fontcolor="",fontname="",fontsize="",height="",style="",URL="",width="",]{struct40};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n406 -> struct40:n410;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n403 -> n406;node[label="#string:%26sourceId%3D ", color="",fillcolor="lightblue",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="filled",URL="",width="",] {n411};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n403 -> n411;subgraph cluster_n413{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="apply::string-from-integer", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtriangle",style="",URL="",width="",] {n412};subgraph cluster_n415{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="apply::integer-one-and-only", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="invtriangle",style="",URL="",width="",] {n414};node[shape="record",label="<n416> #integer | <n417> :resource | <n418> :sourceid",color="lightblue",fillcolor="",fontcolor="",fontname="",fontsize="",height="",style="",URL="",width="",]{struct41};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n414 -> struct41:n418;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n412 -> n414;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n403 -> n412;}}}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct39:n393 -> n399;subgraph cluster_n420{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Subscribe-create-White-List-Permit-Rule", color="#00ff00",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="house",style="filled",URL="",width="",] {n419};node[shape="record",label="{<n421> fn:string-equal | <n423> :whitelist | <n422> #string:Allow }",color="",fillcolor="lightgrey",fontcolor="",fontname="",fontsize="",height="",style="filled",URL="",width="",]{struct42};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n419 -> struct42:n421;}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] struct39:n393 -> n419;node[label="Policy::Default-Deny-Policy", color="",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="",style="",URL="",width="",] {n427};edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n61 -> n427;subgraph cluster_n429{bgcolor="";color="";fillcolor="";fontcolor="";fontname="";fontsize="";label="";labeljust="";labelloc="";style="invis";node[label="Rule::Default-Deny-Rule", color="red",fillcolor="",fixedsize="",fontcolor="",fontname="",fontsize="",height="",shape="octagon",style="filled",URL="",width="",] {n428};}edge[arrowhead="",arrowsize="",arrowtail="",constraint="",color="",decorate="",dir="",fontcolor="",fontname="",fontsize="",headlabel="",headport="",label="",labeldistance="",labelfloat="",labelfontcolor="",labelfontname="",labelfontsize="",minlen="",samehead="",sametail="",style="solid",taillabel="",tailport="",URL="",lhead="",ltail=""] n427 -> n428;}
        
    

x.dotml

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<graph file-name="n0" rankdir="LR" xmlns="http://www.martin-loetzsch.de/DOTML">
    <node id="n1" label="PolicySet::Organization-TEAM-permissions-tests"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n2" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n4" label=":pe-service-name" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n3" label="#string:team.4" shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n1" style="solid" to="n2"/>
    <node id="n8" label="Policy::View-user-sysid-whitelist-check"/>
    <edge from="n1" style="solid" to="n8"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n9" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n11" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n10" label="#string:viewSYSTEMSID" shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n8" style="solid" to="n9"/>
    <cluster id="n16" style="invis">
        <node id="n15" label="Rule::view-check-whitelist" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n17" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n19" label=":whitelist-sysid" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n18" label="#string:Allow" shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n15" style="solid" to="n17"/>
    </cluster>
    <edge from="n10" style="solid" to="n15"/>
    <cluster id="n24" style="invis">
        <node id="n23" label="Rule::ViewSYSTEMSID-denied" shape="octagon" color="red" style="filled"/>
        <cluster id="n25">
            <node id="n26" label="urn:com:company:team:xacml:advice:uid-sysid:message" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n27" label="urn:com:company:xacml:advice:message">
                <node id="n28" label="#string:You do not have permission to access data related to this SYSTEMS ID. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n10" style="solid" to="n26"/>
    </cluster>
    <edge from="n10" style="solid" to="n23"/>
    <node id="n29" label="PolicySet::Feed-related-provisioning-Policies"/>
    <edge from="n1" style="solid" to="n29"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n30" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n32" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n31" label="#string:create" shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n29" style="solid" to="n30"/>
    <node id="n34" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n35" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n37" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n36" label="#string:modify" shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n31" style="solid" to="n34"/>
    <edge from="n34" style="solid" to="n35"/>
    <node id="n39" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n40" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n42" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n41" label="#string:delete" shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n36" style="solid" to="n39"/>
    <edge from="n39" style="solid" to="n40"/>
    <node id="n46" label="Policy::Must-Be-an-Employee"/>
    <edge from="n29" style="solid" to="n46"/>
    <cluster id="n48" style="invis">
        <node id="n47" label="Rule::You-Are-an-Employee" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n49" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n51" label=":status" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n50" label="#string:EMPLOYEE " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n47" style="solid" to="n49"/>
    </cluster>
    <edge from="n46" style="solid" to="n47"/>
    <cluster id="n56" style="invis">
        <node id="n55" label="Rule::Not-an-Employee" shape="octagon" color="red" style="filled"/>
        <cluster id="n57">
            <node id="n58" label="urn:com:company:xacml:advice:employeeonly" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n59" label="urn:com:company:xacml:advice:message">
                <node id="n60" label="#string:You must be an Company employee. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n46" style="solid" to="n58"/>
    </cluster>
    <edge from="n46" style="solid" to="n55"/>
    <node id="n61" label="PolicySet::Provisioning-Policies"/>
    <edge from="n29" style="solid" to="n61"/>
    <node id="n62" label="PolicySet::Publishing-Policies"/>
    <edge from="n61" style="solid" to="n62"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n63" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n65" label=":provision" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n64" label="#string:source" shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n62" style="solid" to="n63"/>
    <node id="n69" label="Policy::Publishers-must-own-or-admin-their-source"/>
    <edge from="n62" style="solid" to="n69"/>
    <cluster id="n71" style="invis">
        <node id="n70" label="Rule::Publish-owns-or-admins-the-data-source" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n72" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n74" label=":admin" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n73" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n70" style="solid" to="n72"/>
    </cluster>
    <edge from="n69" style="solid" to="n70"/>
    <cluster id="n79" style="invis">
        <node id="n78" label="Rule::Publish-does-not-own-or-admin-source" shape="octagon" color="red" style="filled"/>
        <cluster id="n80">
            <node id="n81" label="urn:com:company:xacml:advice:mustown" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n82" label="urn:com:company:xacml:advice:message">
                <node id="n83" label="#string:You must own or admin the data source. " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n84" label="urn:com:company:xacml:advice:url">
                <node id="n85" label="#anyURI: http://www.company.com " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n69" style="solid" to="n81"/>
    </cluster>
    <edge from="n69" style="solid" to="n78"/>
    <node id="n86" label="PolicySet::Publish-Create-Modify-Delete-source-policies"/>
    <edge from="n62" style="solid" to="n86"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n87" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n89" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n88" label="#string:create " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n86" style="solid" to="n87"/>
    <node id="n91" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n92" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n94" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n93" label="#string:modify " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n88" style="solid" to="n91"/>
    <edge from="n91" style="solid" to="n92"/>
    <node id="n96" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n97" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n99" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n98" label="#string:delete " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n93" style="solid" to="n96"/>
    <edge from="n96" style="solid" to="n97"/>
    <node id="n103" label="Policy::Publish-Unrestricted-source-classifications"/>
    <edge from="n86" style="solid" to="n103"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n104" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n106" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n105" label="#string:Company Proprietary (Internal Use Only) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n103" style="solid" to="n104"/>
    <node id="n108" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n109" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n111" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n110" label="#string:Non-Sensitive Customer Data " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n105" style="solid" to="n108"/>
    <edge from="n108" style="solid" to="n109"/>
    <cluster id="n116" style="invis">
        <node id="n115" label="Rule::Publish-Unrestricted-source-Permit" shape="house" color="#00ff00" style="filled"/>
    </cluster>
    <edge from="n110" style="solid" to="n115"/>
    <node id="n117" label="Policy::Pubish-Secure-Restricted-source-classifications"/>
    <edge from="n86" style="solid" to="n117"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n118" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n120" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n119" label="#string:Company Proprietary (Secure Restricted) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n117" style="solid" to="n118"/>
    <cluster id="n125" style="invis">
        <node id="n124" label="Rule::Publish-Secure-Restricted-source-Deny" shape="octagon" color="red" style="filled"/>
        <cluster id="n126">
            <node id="n127" label="urn:com:company:division:xacml:advice:secure_restricted" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n128" label="urn:com:company:xacml:advice:message">
                <node id="n129" label="#string:Company Proprietary (Secure Restricted) data should NOT go through the Project. " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n130" label="urn:com:company:xacml:advice:url">
                <node id="n131" label="#anyURI: http://dataprotection.division.company.com/Classification/SecureRestricted.html " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n119" style="solid" to="n127"/>
    </cluster>
    <edge from="n119" style="solid" to="n124"/>
    <node id="n132" label="Policy::Publish-Restricted-source-classification"/>
    <edge from="n86" style="solid" to="n132"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n133" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n135" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n134" label="#string:Company Proprietary (Restricted) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n132" style="solid" to="n133"/>
    <cluster id="n140" style="invis">
        <node id="n139" label="Rule::Publish-Restricted-source-Permit" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n141" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n143" label=":encrypted" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n142" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n139" style="solid" to="n141"/>
        <cluster id="n147">
            <node id="n148" label="urn:com:company:division:xacml:obligation:ABC-001" shape="invhouse" color="#AAFFAA" style="filled"/>
            <cluster color="lightgrey" id="n149" label="urn:com:company:division:xacml:obligation:ABC-001:url">
                <node id="n150" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d23372 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n151" label="urn:com:company:division:xacml:obligation:ABC-001:message">
                <node id="n152" label="#string:Please oblige to follow Company Company Policy regarding the encryption of transmitted data. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n142" style="solid" to="n148"/>
    </cluster>
    <edge from="n134" style="solid" to="n139"/>
    <cluster id="n154" style="invis">
        <node id="n153" label="Rule::Publish-Restricted-source-encryption" shape="house" color="#00ff00" style="filled"/>
        <cluster id="n155">
            <node id="n156" label="urn:com:company:division:xacml:obligation:ABC-001:exception" shape="invhouse" color="#AAFFAA" style="filled"/>
            <cluster color="lightgrey" id="n157" label="urn:com:company:division:xacml:obligation:ABC-001:exception:url">
                <node id="n158" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d23372 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n159" label="urn:com:company:division:xacml:obligation:ABC-001:exception:message">
                <node id="n160" label="#string:Please oblige that you have documented approval to transmit Restricted data unencrypted and will provide such documentation upon audit. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n134" style="solid" to="n156"/>
    </cluster>
    <edge from="n134" style="solid" to="n153"/>
    <node id="n161" label="Policy::Publish-Sensitive-source-classifications"/>
    <edge from="n86" style="solid" to="n161"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n162" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n164" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n163" label="#string:Company Proprietary (Sensitive Personal Information) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n161" style="solid" to="n162"/>
    <node id="n166" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n167" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n169" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n168" label="#string:Sensitive Customer Data " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n163" style="solid" to="n166"/>
    <edge from="n166" style="solid" to="n167"/>
    <node id="n171" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n172" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n174" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n173" label="#string:Customer Data Through A Conduit " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n168" style="solid" to="n171"/>
    <edge from="n171" style="solid" to="n172"/>
    <cluster id="n179" style="invis">
        <node id="n178" label="Rule::Publish-Sensitive-is-encrypted" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n180" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n182" label=":encrypted" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n181" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n178" style="solid" to="n180"/>
        <cluster id="n186">
            <node id="n187" label="urn:com:company:division:xacml:obligation:ABC-001" shape="invhouse" color="#AAFFAA" style="filled"/>
            <cluster color="lightgrey" id="n188" label="urn:com:company:division:xacml:obligation:ABC-001:url">
                <node id="n189" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3dfr3221%26Id%3d234234 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n190" label="urn:com:company:division:xacml:obligation:ABC-001:message">
                <node id="n191" label="#string:Please oblige to follow Company Company Policy regarding the encryption of transmitted data. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n181" style="solid" to="n187"/>
    </cluster>
    <edge from="n173" style="solid" to="n178"/>
    <cluster id="n193" style="invis">
        <node id="n192" label="Rule::Publish-Sensitive-must-be-encrypted" shape="octagon" color="red" style="filled"/>
        <cluster id="n194">
            <node id="n195" label="urn:com:company:division:xacml:advice:ABC-001" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n196" label="urn:com:company:division:xacml:advice:ABC-001:url">
                <node id="n197" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d23372 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n198" label="urn:com:company:division:xacml:advice:ABC-001:message">
                <node id="n199" label="#string:Please follow Company Company Policy regarding the encryption of transmitted data. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n173" style="solid" to="n195"/>
    </cluster>
    <edge from="n173" style="solid" to="n192"/>
    <node id="n200" label="Policy::Publish-no-source-classification-given"/>
    <edge from="n86" style="solid" to="n200"/>
    <cluster id="n202" style="invis">
        <node id="n201" label="Rule::Publish-no-source-classification-deny" shape="octagon" color="red" style="filled"/>
        <cluster id="n203">
            <node id="n204" label="urn:com:company:division:xacml:advice:mustclassify" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n205" label="urn:com:company:xacml:advice:message">
                <node id="n206" label="#string:All data sources must be classified according to XYZP. " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n207" label="urn:com:company:xacml:advice:url">
                <node id="n208" label="#anyURI: http://dataprotection.division.company.com/default-new.html " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n200" style="solid" to="n204"/>
    </cluster>
    <edge from="n200" style="solid" to="n201"/>
    <node id="n209" label="PolicySet::Subscriber-Policies"/>
    <edge from="n61" style="solid" to="n209"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n210" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n212" label=":provision" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n211" label="#string:subscription " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n209" style="solid" to="n210"/>
    <node id="n216" label="Policy::Subscribe-must-own-or-admin-subscription"/>
    <edge from="n209" style="solid" to="n216"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n217" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n219" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n218" label="#string:modify " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n216" style="solid" to="n217"/>
    <node id="n221" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n222" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n224" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n223" label="#string:delete " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n218" style="solid" to="n221"/>
    <edge from="n221" style="solid" to="n222"/>
    <cluster id="n229" style="invis">
        <node id="n228" label="Rule::Subscribe-owns-or-admins" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n230" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n232" label=":admin" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n231" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n228" style="solid" to="n230"/>
    </cluster>
    <edge from="n223" style="solid" to="n228"/>
    <cluster id="n237" style="invis">
        <node id="n236" label="Rule::Subscribe-does-not-own-or-admin" shape="octagon" color="red" style="filled"/>
        <cluster id="n238">
            <node id="n239" label="urn:com:company:xacml:advice:mustown" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n240" label="urn:com:company:xacml:advice:message">
                <node id="n241" label="#string:You must own or admin the subscription. " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n242" label="urn:com:company:xacml:advice:url">
                <node id="n243" label="#anyURI: http://www.company.com " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n223" style="solid" to="n239"/>
    </cluster>
    <edge from="n223" style="solid" to="n236"/>
    <node id="n244" label="Policy::Subscribe-must-be-publisher-if-private"/>
    <edge from="n209" style="solid" to="n244"/>
    <cluster id="n245">
        <node id="n246" label="urn:com:company:team:xacml:advice:private:message" shape="invtrapezium" color="salmon" style="filled"/>
        <cluster color="lightgrey" id="n247" label="urn:com:company:xacml:advice:message">
            <node id="n248" label="#string:This source is designated as private. You must ask the publisher to create a subscription for you. " fillcolor="lightblue" style="filled"/>
        </cluster>
    </cluster>
    <edge from="n244" style="solid" to="n246"/>
    <cluster id="n250" style="invis">
        <node id="n249" label="Rule::Subscribe-source-is-not-private" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n251" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n253" label=":private" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n252" label="#boolean:false " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n249" style="solid" to="n251"/>
    </cluster>
    <edge from="n244" style="solid" to="n249"/>
    <cluster id="n258" style="invis">
        <node id="n257" label="Rule::Subscribe-check-privacy-true-and-subscriber-is-publisher" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n259" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n261" label=":private" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n260" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n257" style="solid" to="n259"/>
    </cluster>
    <edge from="n244" style="solid" to="n257"/>
    <cluster id="n265" style="invis">
        <cluster id="n267" style="invis">
            <node id="n266" label="apply::string-is-in" shape="invtriangle"/>
            <cluster id="n269" style="invis">
                <node id="n268" label="apply::string-one-and-only" shape="invtriangle"/>
                <record color="lightblue">
                    <node id="n270" label="#string"/>
                    <node id="n271" label=":access-subject"/>
                    <node id="n272" label=":subject-id"/>
                </record>
                <edge from="n268" style="solid" to="n272"/>
            </cluster>
            <edge from="n266" style="solid" to="n268"/>
            <record color="lightblue">
                <node id="n273" label="#string"/>
                <node id="n274" label=":resource"/>
                <node id="n275" label=":publisher"/>
            </record>
            <edge from="n266" style="solid" to="n275"/>
        </cluster>
        <edge from="n260" style="solid" to="n266"/>
    </cluster>
    <node id="n276" label="PolicySet::Subscribe-creation-Policies"/>
    <edge from="n209" style="solid" to="n276"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n277" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n279" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n278" label="#string:create " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n276" style="solid" to="n277"/>
    <node id="n283" label="Policy::Subscribe-create-nrestricted-source-classifications"/>
    <edge from="n276" style="solid" to="n283"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n284" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n286" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n285" label="#string:Company Proprietary (Internal Use Only) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n283" style="solid" to="n284"/>
    <node id="n288" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n289" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n291" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n290" label="#string:Non-Sensitive Customer Data " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n285" style="solid" to="n288"/>
    <edge from="n288" style="solid" to="n289"/>
    <cluster id="n296" style="invis">
        <node id="n295" label="Rule::Subscribe-create-unrestricted-permit" shape="house" color="#00ff00" style="filled"/>
    </cluster>
    <edge from="n290" style="solid" to="n295"/>
    <node id="n297" label="Policy::Subscribe-create-Secure-Restricted-classifications"/>
    <edge from="n276" style="solid" to="n297"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n298" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n300" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n299" label="#string:Company Proprietary (Secure Restricted) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n297" style="solid" to="n298"/>
    <cluster id="n305" style="invis">
        <node id="n304" label="Rule::Subscribe-Secure-Restricted-Deny" shape="octagon" color="red" style="filled"/>
        <cluster id="n306">
            <node id="n307" label="urn:com:company:division:xacml:advice:secure_restricted" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n308" label="urn:com:company:xacml:advice:message">
                <node id="n309" label="#string:Company Proprietary (Secure Restricted) data should NOT go through the Project. This Data Feed should NOT have this classification. " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n310" label="urn:com:company:xacml:advice:url">
                <node id="n311" label="#anyURI: http://dataprotection.division.company.com/Classification/SecureRestricted.html " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n312" label="urn:com:company:xacml:advice:email">
                <node id="n313" label="#anyURI: mailto:dplr@company.com " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n299" style="solid" to="n307"/>
    </cluster>
    <edge from="n299" style="solid" to="n304"/>
    <node id="n314" label="Policy::Subscribe-create-Restricted-source-classifications"/>
    <edge from="n276" style="solid" to="n314"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n315" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n317" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n316" label="#string:Company Proprietary (Restricted) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n314" style="solid" to="n315"/>
    <cluster id="n322" style="invis">
        <node id="n321" label="Rule::Subscribe-create-Restricted-is-encrypted" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n323" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n325" label=":encrypted" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n324" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n321" style="solid" to="n323"/>
        <cluster id="n329">
            <node id="n330" label="urn:com:company:division:xacml:obligation:XYZP-4213" shape="invhouse" color="#AAFFAA" style="filled"/>
            <cluster color="lightgrey" id="n331" label="urn:com:company:division:xacml:obligation:XYZP-4213:url">
                <node id="n332" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d54321 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n333" label="urn:com:company:division:xacml:obligation:XYZP-4213:message">
                <node id="n334" label="#string:Please oblige to follow Company Company Policy regarding the encryption of data at rest. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n324" style="solid" to="n330"/>
    </cluster>
    <edge from="n316" style="solid" to="n321"/>
    <cluster id="n336" style="invis">
        <node id="n335" label="Rule::Subscribe-create-Restricted-should-be-encrypted" shape="house" color="#00ff00" style="filled"/>
        <cluster id="n337">
            <node id="n338" label="urn:com:company:division:xacml:obligation:XYZP-4213:exception" shape="invhouse" color="#AAFFAA" style="filled"/>
            <cluster color="lightgrey" id="n339" label="urn:com:company:division:xacml:obligation:XYZP-4213:exception:url">
                <node id="n340" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d54321 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n341" label="urn:com:company:division:xacml:obligation:XYZP-4213:exception:message">
                <node id="n342" label="#string:Please oblige that you have documented approval to store Restricted data unencrypted and will provide such documentation upon audit. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n316" style="solid" to="n338"/>
    </cluster>
    <edge from="n316" style="solid" to="n335"/>
    <node id="n343" label="Policy::Subscribe-create-Sensitive-source-classifications"/>
    <edge from="n276" style="solid" to="n343"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n344" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n346" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n345" label="#string:Company Proprietary (Sensitive Personal Information) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n343" style="solid" to="n344"/>
    <node id="n348" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n349" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n351" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n350" label="#string:Sensitive Customer Data " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n345" style="solid" to="n348"/>
    <edge from="n348" style="solid" to="n349"/>
    <node id="n353" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n354" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n356" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n355" label="#string:Customer Data Through A Conduit " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n350" style="solid" to="n353"/>
    <edge from="n353" style="solid" to="n354"/>
    <cluster id="n361" style="invis">
        <node id="n360" label="Rule::Subscribe-create-Sensitive-is-encrypted" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n362" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n364" label=":encrypted" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n363" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n360" style="solid" to="n362"/>
        <cluster id="n368">
            <node id="n369" label="urn:com:company:division:xacml:obligation:XYZP-4213" shape="invhouse" color="#AAFFAA" style="filled"/>
            <cluster color="lightgrey" id="n370" label="urn:com:company:division:xacml:obligation:XYZP-4213:url">
                <node id="n371" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d54321 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n372" label="urn:com:company:division:xacml:obligation:XYZP-4213:message">
                <node id="n373" label="#string:Please oblige to follow Company Company Policy regarding the encryption of data at rest. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n363" style="solid" to="n369"/>
    </cluster>
    <edge from="n355" style="solid" to="n360"/>
    <cluster id="n375" style="invis">
        <node id="n374" label="Rule::Subscribe-create-Sensitive-must-be-encrypted" shape="octagon" color="red" style="filled"/>
        <cluster id="n376">
            <node id="n377" label="urn:com:company:division:xacml:advice:XYZP-4213" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n378" label="urn:com:company:division:xacml:advice:XYZP-4213:url">
                <node id="n379" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d54321 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n380" label="urn:com:company:division:xacml:advice:XYZP-4213:message">
                <node id="n381" label="#string:Please follow Company Company Policy regarding the encryption of data at rest. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n355" style="solid" to="n377"/>
    </cluster>
    <edge from="n355" style="solid" to="n374"/>
    <node id="n382" label="Policy::Subscribe-create-No-data-source-classification-given"/>
    <edge from="n276" style="solid" to="n382"/>
    <cluster id="n384" style="invis">
        <node id="n383" label="Rule::Subscribe-create-No-data-source-classification-deny" shape="octagon" color="red" style="filled"/>
        <cluster id="n385">
            <node id="n386" label="urn:com:company:division:xacml:advice:mustclassify" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n387" label="urn:com:company:xacml:advice:message">
                <node id="n388" label="#string:All data sources must be classified according to XYZP. " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n389" label="urn:com:company:xacml:advice:url">
                <node id="n390" label="#anyURI: http://dataprotection.division.company.com/default-new.html " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n382" style="solid" to="n386"/>
    </cluster>
    <edge from="n382" style="solid" to="n383"/>
    <node id="n391" label="Policy::Subscribe-create-White-List-Check-Policy"/>
    <edge from="n209" style="solid" to="n391"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n392" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n394" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n393" label="#string:create " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n391" style="solid" to="n392"/>
    <cluster id="n398">
        <node id="n399" label="urn:com:company:project:team:subscriber:access" shape="invhouse" color="salmon" style="filled"/>
        <cluster color="lightgrey" id="n400" label="urn:com:company:xacml:obligation:message">
            <node id="n401" label="#string:You must request access to subscribe to this source. " fillcolor="lightblue" style="filled"/>
        </cluster>
        <cluster color="lightgrey" id="n402" label="urn:com:company:xacml:obligation:email">
            <cluster id="n404" style="invis">
                <node id="n403" label="apply::string-concatenate" shape="invtriangle"/>
                <node id="n405" label="#string: mailto://g27477@company.com?subject=Feed%20Access%20Request&amp;body=http://zzz.vvv.company.com:9080/TeamPipAdmin/CreateObsForm%3FsysUid%3D " fillcolor="lightblue" style="filled"/>
                <edge from="n403" style="solid" to="n405"/>
                <cluster id="n407" style="invis">
                    <node id="n406" label="apply::string-one-and-only" shape="invtriangle"/>
                    <record color="lightblue">
                        <node id="n408" label="#string"/>
                        <node id="n409" label=":access-subject"/>
                        <node id="n410" label=":subject-id"/>
                    </record>
                    <edge from="n406" style="solid" to="n410"/>
                </cluster>
                <edge from="n403" style="solid" to="n406"/>
                <node id="n411" label="#string:%26sourceId%3D " fillcolor="lightblue" style="filled"/>
                <edge from="n403" style="solid" to="n411"/>
                <cluster id="n413" style="invis">
                    <node id="n412" label="apply::string-from-integer" shape="invtriangle"/>
                    <cluster id="n415" style="invis">
                        <node id="n414" label="apply::integer-one-and-only" shape="invtriangle"/>
                        <record color="lightblue">
                            <node id="n416" label="#integer"/>
                            <node id="n417" label=":resource"/>
                            <node id="n418" label=":sourceid"/>
                        </record>
                        <edge from="n414" style="solid" to="n418"/>
                    </cluster>
                    <edge from="n412" style="solid" to="n414"/>
                </cluster>
                <edge from="n403" style="solid" to="n412"/>
            </cluster>
        </cluster>
    </cluster>
    <edge from="n393" style="solid" to="n399"/>
    <cluster id="n420" style="invis">
        <node id="n419" label="Rule::Subscribe-create-White-List-Permit-Rule" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n421" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n423" label=":whitelist" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n422" label="#string:Allow " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n419" style="solid" to="n421"/>
    </cluster>
    <edge from="n393" style="solid" to="n419"/>
    <node id="n427" label="Policy::Default-Deny-Policy"/>
    <edge from="n61" style="solid" to="n427"/>
    <cluster id="n429" style="invis">
        <node id="n428" label="Rule::Default-Deny-Rule" shape="octagon" color="red" style="filled"/>
    </cluster>
    <edge from="n427" style="solid" to="n428"/>
</graph>

x.dotml.xml

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<graph file-name="n0" rankdir="LR" xmlns="http://www.martin-loetzsch.de/DOTML">
    <node id="n1" label="PolicySet::Organization-TEAM-permissions-tests"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n2" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n4" label=":pe-service-name" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n3" label="#string:team.4" shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n1" style="solid" to="n2"/>
    <node id="n8" label="Policy::View-user-sysid-whitelist-check"/>
    <edge from="n1" style="solid" to="n8"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n9" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n11" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n10" label="#string:viewSYSTEMSID" shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n8" style="solid" to="n9"/>
    <cluster id="n16" style="invis">
        <node id="n15" label="Rule::view-check-whitelist" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n17" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n19" label=":whitelist-sysid" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n18" label="#string:Allow" shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n15" style="solid" to="n17"/>
    </cluster>
    <edge from="n10" style="solid" to="n15"/>
    <cluster id="n24" style="invis">
        <node id="n23" label="Rule::ViewSYSTEMSID-denied" shape="octagon" color="red" style="filled"/>
        <cluster id="n25">
            <node id="n26" label="urn:com:company:team:xacml:advice:uid-sysid:message" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n27" label="urn:com:company:xacml:advice:message">
                <node id="n28" label="#string:You do not have permission to access data related to this SYSTEMS ID. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n10" style="solid" to="n26"/>
    </cluster>
    <edge from="n10" style="solid" to="n23"/>
    <node id="n29" label="PolicySet::Feed-related-provisioning-Policies"/>
    <edge from="n1" style="solid" to="n29"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n30" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n32" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n31" label="#string:create" shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n29" style="solid" to="n30"/>
    <node id="n34" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n35" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n37" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n36" label="#string:modify" shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n31" style="solid" to="n34"/>
    <edge from="n34" style="solid" to="n35"/>
    <node id="n39" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n40" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n42" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n41" label="#string:delete" shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n36" style="solid" to="n39"/>
    <edge from="n39" style="solid" to="n40"/>
    <node id="n46" label="Policy::Must-Be-an-Employee"/>
    <edge from="n29" style="solid" to="n46"/>
    <cluster id="n48" style="invis">
        <node id="n47" label="Rule::You-Are-an-Employee" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n49" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n51" label=":status" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n50" label="#string:EMPLOYEE " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n47" style="solid" to="n49"/>
    </cluster>
    <edge from="n46" style="solid" to="n47"/>
    <cluster id="n56" style="invis">
        <node id="n55" label="Rule::Not-an-Employee" shape="octagon" color="red" style="filled"/>
        <cluster id="n57">
            <node id="n58" label="urn:com:company:xacml:advice:employeeonly" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n59" label="urn:com:company:xacml:advice:message">
                <node id="n60" label="#string:You must be an Company employee. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n46" style="solid" to="n58"/>
    </cluster>
    <edge from="n46" style="solid" to="n55"/>
    <node id="n61" label="PolicySet::Provisioning-Policies"/>
    <edge from="n29" style="solid" to="n61"/>
    <node id="n62" label="PolicySet::Publishing-Policies"/>
    <edge from="n61" style="solid" to="n62"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n63" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n65" label=":provision" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n64" label="#string:source" shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n62" style="solid" to="n63"/>
    <node id="n69" label="Policy::Publishers-must-own-or-admin-their-source"/>
    <edge from="n62" style="solid" to="n69"/>
    <cluster id="n71" style="invis">
        <node id="n70" label="Rule::Publish-owns-or-admins-the-data-source" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n72" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n74" label=":admin" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n73" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n70" style="solid" to="n72"/>
    </cluster>
    <edge from="n69" style="solid" to="n70"/>
    <cluster id="n79" style="invis">
        <node id="n78" label="Rule::Publish-does-not-own-or-admin-source" shape="octagon" color="red" style="filled"/>
        <cluster id="n80">
            <node id="n81" label="urn:com:company:xacml:advice:mustown" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n82" label="urn:com:company:xacml:advice:message">
                <node id="n83" label="#string:You must own or admin the data source. " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n84" label="urn:com:company:xacml:advice:url">
                <node id="n85" label="#anyURI: http://www.company.com " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n69" style="solid" to="n81"/>
    </cluster>
    <edge from="n69" style="solid" to="n78"/>
    <node id="n86" label="PolicySet::Publish-Create-Modify-Delete-source-policies"/>
    <edge from="n62" style="solid" to="n86"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n87" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n89" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n88" label="#string:create " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n86" style="solid" to="n87"/>
    <node id="n91" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n92" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n94" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n93" label="#string:modify " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n88" style="solid" to="n91"/>
    <edge from="n91" style="solid" to="n92"/>
    <node id="n96" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n97" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n99" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n98" label="#string:delete " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n93" style="solid" to="n96"/>
    <edge from="n96" style="solid" to="n97"/>
    <node id="n103" label="Policy::Publish-Unrestricted-source-classifications"/>
    <edge from="n86" style="solid" to="n103"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n104" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n106" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n105" label="#string:Company Proprietary (Internal Use Only) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n103" style="solid" to="n104"/>
    <node id="n108" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n109" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n111" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n110" label="#string:Non-Sensitive Customer Data " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n105" style="solid" to="n108"/>
    <edge from="n108" style="solid" to="n109"/>
    <cluster id="n116" style="invis">
        <node id="n115" label="Rule::Publish-Unrestricted-source-Permit" shape="house" color="#00ff00" style="filled"/>
    </cluster>
    <edge from="n110" style="solid" to="n115"/>
    <node id="n117" label="Policy::Pubish-Secure-Restricted-source-classifications"/>
    <edge from="n86" style="solid" to="n117"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n118" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n120" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n119" label="#string:Company Proprietary (Secure Restricted) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n117" style="solid" to="n118"/>
    <cluster id="n125" style="invis">
        <node id="n124" label="Rule::Publish-Secure-Restricted-source-Deny" shape="octagon" color="red" style="filled"/>
        <cluster id="n126">
            <node id="n127" label="urn:com:company:division:xacml:advice:secure_restricted" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n128" label="urn:com:company:xacml:advice:message">
                <node id="n129" label="#string:Company Proprietary (Secure Restricted) data should NOT go through the Project. " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n130" label="urn:com:company:xacml:advice:url">
                <node id="n131" label="#anyURI: http://dataprotection.division.company.com/Classification/SecureRestricted.html " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n119" style="solid" to="n127"/>
    </cluster>
    <edge from="n119" style="solid" to="n124"/>
    <node id="n132" label="Policy::Publish-Restricted-source-classification"/>
    <edge from="n86" style="solid" to="n132"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n133" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n135" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n134" label="#string:Company Proprietary (Restricted) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n132" style="solid" to="n133"/>
    <cluster id="n140" style="invis">
        <node id="n139" label="Rule::Publish-Restricted-source-Permit" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n141" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n143" label=":encrypted" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n142" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n139" style="solid" to="n141"/>
        <cluster id="n147">
            <node id="n148" label="urn:com:company:division:xacml:obligation:ABC-001" shape="invhouse" color="#AAFFAA" style="filled"/>
            <cluster color="lightgrey" id="n149" label="urn:com:company:division:xacml:obligation:ABC-001:url">
                <node id="n150" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d23372 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n151" label="urn:com:company:division:xacml:obligation:ABC-001:message">
                <node id="n152" label="#string:Please oblige to follow Company Company Policy regarding the encryption of transmitted data. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n142" style="solid" to="n148"/>
    </cluster>
    <edge from="n134" style="solid" to="n139"/>
    <cluster id="n154" style="invis">
        <node id="n153" label="Rule::Publish-Restricted-source-encryption" shape="house" color="#00ff00" style="filled"/>
        <cluster id="n155">
            <node id="n156" label="urn:com:company:division:xacml:obligation:ABC-001:exception" shape="invhouse" color="#AAFFAA" style="filled"/>
            <cluster color="lightgrey" id="n157" label="urn:com:company:division:xacml:obligation:ABC-001:exception:url">
                <node id="n158" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d23372 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n159" label="urn:com:company:division:xacml:obligation:ABC-001:exception:message">
                <node id="n160" label="#string:Please oblige that you have documented approval to transmit Restricted data unencrypted and will provide such documentation upon audit. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n134" style="solid" to="n156"/>
    </cluster>
    <edge from="n134" style="solid" to="n153"/>
    <node id="n161" label="Policy::Publish-Sensitive-source-classifications"/>
    <edge from="n86" style="solid" to="n161"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n162" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n164" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n163" label="#string:Company Proprietary (Sensitive Personal Information) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n161" style="solid" to="n162"/>
    <node id="n166" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n167" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n169" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n168" label="#string:Sensitive Customer Data " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n163" style="solid" to="n166"/>
    <edge from="n166" style="solid" to="n167"/>
    <node id="n171" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n172" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n174" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n173" label="#string:Customer Data Through A Conduit " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n168" style="solid" to="n171"/>
    <edge from="n171" style="solid" to="n172"/>
    <cluster id="n179" style="invis">
        <node id="n178" label="Rule::Publish-Sensitive-is-encrypted" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n180" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n182" label=":encrypted" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n181" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n178" style="solid" to="n180"/>
        <cluster id="n186">
            <node id="n187" label="urn:com:company:division:xacml:obligation:ABC-001" shape="invhouse" color="#AAFFAA" style="filled"/>
            <cluster color="lightgrey" id="n188" label="urn:com:company:division:xacml:obligation:ABC-001:url">
                <node id="n189" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3dfr3221%26Id%3d234234 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n190" label="urn:com:company:division:xacml:obligation:ABC-001:message">
                <node id="n191" label="#string:Please oblige to follow Company Company Policy regarding the encryption of transmitted data. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n181" style="solid" to="n187"/>
    </cluster>
    <edge from="n173" style="solid" to="n178"/>
    <cluster id="n193" style="invis">
        <node id="n192" label="Rule::Publish-Sensitive-must-be-encrypted" shape="octagon" color="red" style="filled"/>
        <cluster id="n194">
            <node id="n195" label="urn:com:company:division:xacml:advice:ABC-001" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n196" label="urn:com:company:division:xacml:advice:ABC-001:url">
                <node id="n197" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d23372 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n198" label="urn:com:company:division:xacml:advice:ABC-001:message">
                <node id="n199" label="#string:Please follow Company Company Policy regarding the encryption of transmitted data. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n173" style="solid" to="n195"/>
    </cluster>
    <edge from="n173" style="solid" to="n192"/>
    <node id="n200" label="Policy::Publish-no-source-classification-given"/>
    <edge from="n86" style="solid" to="n200"/>
    <cluster id="n202" style="invis">
        <node id="n201" label="Rule::Publish-no-source-classification-deny" shape="octagon" color="red" style="filled"/>
        <cluster id="n203">
            <node id="n204" label="urn:com:company:division:xacml:advice:mustclassify" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n205" label="urn:com:company:xacml:advice:message">
                <node id="n206" label="#string:All data sources must be classified according to XYZP. " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n207" label="urn:com:company:xacml:advice:url">
                <node id="n208" label="#anyURI: http://dataprotection.division.company.com/default-new.html " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n200" style="solid" to="n204"/>
    </cluster>
    <edge from="n200" style="solid" to="n201"/>
    <node id="n209" label="PolicySet::Subscriber-Policies"/>
    <edge from="n61" style="solid" to="n209"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n210" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n212" label=":provision" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n211" label="#string:subscription " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n209" style="solid" to="n210"/>
    <node id="n216" label="Policy::Subscribe-must-own-or-admin-subscription"/>
    <edge from="n209" style="solid" to="n216"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n217" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n219" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n218" label="#string:modify " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n216" style="solid" to="n217"/>
    <node id="n221" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n222" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n224" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n223" label="#string:delete " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n218" style="solid" to="n221"/>
    <edge from="n221" style="solid" to="n222"/>
    <cluster id="n229" style="invis">
        <node id="n228" label="Rule::Subscribe-owns-or-admins" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n230" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n232" label=":admin" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n231" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n228" style="solid" to="n230"/>
    </cluster>
    <edge from="n223" style="solid" to="n228"/>
    <cluster id="n237" style="invis">
        <node id="n236" label="Rule::Subscribe-does-not-own-or-admin" shape="octagon" color="red" style="filled"/>
        <cluster id="n238">
            <node id="n239" label="urn:com:company:xacml:advice:mustown" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n240" label="urn:com:company:xacml:advice:message">
                <node id="n241" label="#string:You must own or admin the subscription. " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n242" label="urn:com:company:xacml:advice:url">
                <node id="n243" label="#anyURI: http://www.company.com " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n223" style="solid" to="n239"/>
    </cluster>
    <edge from="n223" style="solid" to="n236"/>
    <node id="n244" label="Policy::Subscribe-must-be-publisher-if-private"/>
    <edge from="n209" style="solid" to="n244"/>
    <cluster id="n245">
        <node id="n246" label="urn:com:company:team:xacml:advice:private:message" shape="invtrapezium" color="salmon" style="filled"/>
        <cluster color="lightgrey" id="n247" label="urn:com:company:xacml:advice:message">
            <node id="n248" label="#string:This source is designated as private. You must ask the publisher to create a subscription for you. " fillcolor="lightblue" style="filled"/>
        </cluster>
    </cluster>
    <edge from="n244" style="solid" to="n246"/>
    <cluster id="n250" style="invis">
        <node id="n249" label="Rule::Subscribe-source-is-not-private" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n251" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n253" label=":private" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n252" label="#boolean:false " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n249" style="solid" to="n251"/>
    </cluster>
    <edge from="n244" style="solid" to="n249"/>
    <cluster id="n258" style="invis">
        <node id="n257" label="Rule::Subscribe-check-privacy-true-and-subscriber-is-publisher" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n259" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n261" label=":private" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n260" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n257" style="solid" to="n259"/>
    </cluster>
    <edge from="n244" style="solid" to="n257"/>
    <cluster id="n265" style="invis">
        <cluster id="n267" style="invis">
            <node id="n266" label="apply::string-is-in" shape="invtriangle"/>
            <cluster id="n269" style="invis">
                <node id="n268" label="apply::string-one-and-only" shape="invtriangle"/>
                <record color="lightblue">
                    <node id="n270" label="#string"/>
                    <node id="n271" label=":access-subject"/>
                    <node id="n272" label=":subject-id"/>
                </record>
                <edge from="n268" style="solid" to="n272"/>
            </cluster>
            <edge from="n266" style="solid" to="n268"/>
            <record color="lightblue">
                <node id="n273" label="#string"/>
                <node id="n274" label=":resource"/>
                <node id="n275" label=":publisher"/>
            </record>
            <edge from="n266" style="solid" to="n275"/>
        </cluster>
        <edge from="n260" style="solid" to="n266"/>
    </cluster>
    <node id="n276" label="PolicySet::Subscribe-creation-Policies"/>
    <edge from="n209" style="solid" to="n276"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n277" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n279" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n278" label="#string:create " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n276" style="solid" to="n277"/>
    <node id="n283" label="Policy::Subscribe-create-nrestricted-source-classifications"/>
    <edge from="n276" style="solid" to="n283"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n284" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n286" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n285" label="#string:Company Proprietary (Internal Use Only) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n283" style="solid" to="n284"/>
    <node id="n288" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n289" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n291" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n290" label="#string:Non-Sensitive Customer Data " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n285" style="solid" to="n288"/>
    <edge from="n288" style="solid" to="n289"/>
    <cluster id="n296" style="invis">
        <node id="n295" label="Rule::Subscribe-create-unrestricted-permit" shape="house" color="#00ff00" style="filled"/>
    </cluster>
    <edge from="n290" style="solid" to="n295"/>
    <node id="n297" label="Policy::Subscribe-create-Secure-Restricted-classifications"/>
    <edge from="n276" style="solid" to="n297"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n298" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n300" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n299" label="#string:Company Proprietary (Secure Restricted) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n297" style="solid" to="n298"/>
    <cluster id="n305" style="invis">
        <node id="n304" label="Rule::Subscribe-Secure-Restricted-Deny" shape="octagon" color="red" style="filled"/>
        <cluster id="n306">
            <node id="n307" label="urn:com:company:division:xacml:advice:secure_restricted" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n308" label="urn:com:company:xacml:advice:message">
                <node id="n309" label="#string:Company Proprietary (Secure Restricted) data should NOT go through the Project. This Data Feed should NOT have this classification. " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n310" label="urn:com:company:xacml:advice:url">
                <node id="n311" label="#anyURI: http://dataprotection.division.company.com/Classification/SecureRestricted.html " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n312" label="urn:com:company:xacml:advice:email">
                <node id="n313" label="#anyURI: mailto:dplr@company.com " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n299" style="solid" to="n307"/>
    </cluster>
    <edge from="n299" style="solid" to="n304"/>
    <node id="n314" label="Policy::Subscribe-create-Restricted-source-classifications"/>
    <edge from="n276" style="solid" to="n314"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n315" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n317" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n316" label="#string:Company Proprietary (Restricted) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n314" style="solid" to="n315"/>
    <cluster id="n322" style="invis">
        <node id="n321" label="Rule::Subscribe-create-Restricted-is-encrypted" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n323" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n325" label=":encrypted" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n324" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n321" style="solid" to="n323"/>
        <cluster id="n329">
            <node id="n330" label="urn:com:company:division:xacml:obligation:XYZP-4213" shape="invhouse" color="#AAFFAA" style="filled"/>
            <cluster color="lightgrey" id="n331" label="urn:com:company:division:xacml:obligation:XYZP-4213:url">
                <node id="n332" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d54321 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n333" label="urn:com:company:division:xacml:obligation:XYZP-4213:message">
                <node id="n334" label="#string:Please oblige to follow Company Company Policy regarding the encryption of data at rest. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n324" style="solid" to="n330"/>
    </cluster>
    <edge from="n316" style="solid" to="n321"/>
    <cluster id="n336" style="invis">
        <node id="n335" label="Rule::Subscribe-create-Restricted-should-be-encrypted" shape="house" color="#00ff00" style="filled"/>
        <cluster id="n337">
            <node id="n338" label="urn:com:company:division:xacml:obligation:XYZP-4213:exception" shape="invhouse" color="#AAFFAA" style="filled"/>
            <cluster color="lightgrey" id="n339" label="urn:com:company:division:xacml:obligation:XYZP-4213:exception:url">
                <node id="n340" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d54321 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n341" label="urn:com:company:division:xacml:obligation:XYZP-4213:exception:message">
                <node id="n342" label="#string:Please oblige that you have documented approval to store Restricted data unencrypted and will provide such documentation upon audit. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n316" style="solid" to="n338"/>
    </cluster>
    <edge from="n316" style="solid" to="n335"/>
    <node id="n343" label="Policy::Subscribe-create-Sensitive-source-classifications"/>
    <edge from="n276" style="solid" to="n343"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n344" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n346" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n345" label="#string:Company Proprietary (Sensitive Personal Information) " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n343" style="solid" to="n344"/>
    <node id="n348" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n349" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n351" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n350" label="#string:Sensitive Customer Data " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n345" style="solid" to="n348"/>
    <edge from="n348" style="solid" to="n349"/>
    <node id="n353" label="OR" shape="circle" color="purple"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n354" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n356" label=":classification" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n355" label="#string:Customer Data Through A Conduit " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n350" style="solid" to="n353"/>
    <edge from="n353" style="solid" to="n354"/>
    <cluster id="n361" style="invis">
        <node id="n360" label="Rule::Subscribe-create-Sensitive-is-encrypted" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n362" label="fn:boolean-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n364" label=":encrypted" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n363" label="#boolean:true " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n360" style="solid" to="n362"/>
        <cluster id="n368">
            <node id="n369" label="urn:com:company:division:xacml:obligation:XYZP-4213" shape="invhouse" color="#AAFFAA" style="filled"/>
            <cluster color="lightgrey" id="n370" label="urn:com:company:division:xacml:obligation:XYZP-4213:url">
                <node id="n371" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d54321 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n372" label="urn:com:company:division:xacml:obligation:XYZP-4213:message">
                <node id="n373" label="#string:Please oblige to follow Company Company Policy regarding the encryption of data at rest. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n363" style="solid" to="n369"/>
    </cluster>
    <edge from="n355" style="solid" to="n360"/>
    <cluster id="n375" style="invis">
        <node id="n374" label="Rule::Subscribe-create-Sensitive-must-be-encrypted" shape="octagon" color="red" style="filled"/>
        <cluster id="n376">
            <node id="n377" label="urn:com:company:division:xacml:advice:XYZP-4213" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n378" label="urn:com:company:division:xacml:advice:XYZP-4213:url">
                <node id="n379" label="#anyURI: https://fable.division.company.com/fable/default.aspx?requestUrl=..%2fcontent%2fview.aspx%3fPageID%3da1234%26Id%3d54321 " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n380" label="urn:com:company:division:xacml:advice:XYZP-4213:message">
                <node id="n381" label="#string:Please follow Company Company Policy regarding the encryption of data at rest. " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n355" style="solid" to="n377"/>
    </cluster>
    <edge from="n355" style="solid" to="n374"/>
    <node id="n382" label="Policy::Subscribe-create-No-data-source-classification-given"/>
    <edge from="n276" style="solid" to="n382"/>
    <cluster id="n384" style="invis">
        <node id="n383" label="Rule::Subscribe-create-No-data-source-classification-deny" shape="octagon" color="red" style="filled"/>
        <cluster id="n385">
            <node id="n386" label="urn:com:company:division:xacml:advice:mustclassify" shape="invtrapezium" color="salmon" style="filled"/>
            <cluster color="lightgrey" id="n387" label="urn:com:company:xacml:advice:message">
                <node id="n388" label="#string:All data sources must be classified according to XYZP. " fillcolor="lightblue" style="filled"/>
            </cluster>
            <cluster color="lightgrey" id="n389" label="urn:com:company:xacml:advice:url">
                <node id="n390" label="#anyURI: http://dataprotection.division.company.com/default-new.html " fillcolor="lightblue" style="filled"/>
            </cluster>
        </cluster>
        <edge from="n382" style="solid" to="n386"/>
    </cluster>
    <edge from="n382" style="solid" to="n383"/>
    <node id="n391" label="Policy::Subscribe-create-White-List-Check-Policy"/>
    <edge from="n209" style="solid" to="n391"/>
    <record fillcolor="lightgrey" style="filled">
        <record>
            <node id="n392" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
            <node id="n394" label=":action-id" shape="parallelogram" color="lightblue" style="solid"/>
            <node id="n393" label="#string:create " shape="parallelogram" color="#FFEE88" style="solid"/>
        </record>
    </record>
    <edge from="n391" style="solid" to="n392"/>
    <cluster id="n398">
        <node id="n399" label="urn:com:company:project:team:subscriber:access" shape="invhouse" color="salmon" style="filled"/>
        <cluster color="lightgrey" id="n400" label="urn:com:company:xacml:obligation:message">
            <node id="n401" label="#string:You must request access to subscribe to this source. " fillcolor="lightblue" style="filled"/>
        </cluster>
        <cluster color="lightgrey" id="n402" label="urn:com:company:xacml:obligation:email">
            <cluster id="n404" style="invis">
                <node id="n403" label="apply::string-concatenate" shape="invtriangle"/>
                <node id="n405" label="#string: mailto://g27477@company.com?subject=Feed%20Access%20Request&amp;body=http://zzz.vvv.company.com:9080/TeamPipAdmin/CreateObsForm%3FsysUid%3D " fillcolor="lightblue" style="filled"/>
                <edge from="n403" style="solid" to="n405"/>
                <cluster id="n407" style="invis">
                    <node id="n406" label="apply::string-one-and-only" shape="invtriangle"/>
                    <record color="lightblue">
                        <node id="n408" label="#string"/>
                        <node id="n409" label=":access-subject"/>
                        <node id="n410" label=":subject-id"/>
                    </record>
                    <edge from="n406" style="solid" to="n410"/>
                </cluster>
                <edge from="n403" style="solid" to="n406"/>
                <node id="n411" label="#string:%26sourceId%3D " fillcolor="lightblue" style="filled"/>
                <edge from="n403" style="solid" to="n411"/>
                <cluster id="n413" style="invis">
                    <node id="n412" label="apply::string-from-integer" shape="invtriangle"/>
                    <cluster id="n415" style="invis">
                        <node id="n414" label="apply::integer-one-and-only" shape="invtriangle"/>
                        <record color="lightblue">
                            <node id="n416" label="#integer"/>
                            <node id="n417" label=":resource"/>
                            <node id="n418" label=":sourceid"/>
                        </record>
                        <edge from="n414" style="solid" to="n418"/>
                    </cluster>
                    <edge from="n412" style="solid" to="n414"/>
                </cluster>
                <edge from="n403" style="solid" to="n412"/>
            </cluster>
        </cluster>
    </cluster>
    <edge from="n393" style="solid" to="n399"/>
    <cluster id="n420" style="invis">
        <node id="n419" label="Rule::Subscribe-create-White-List-Permit-Rule" shape="house" color="#00ff00" style="filled"/>
        <record fillcolor="lightgrey" style="filled">
            <record>
                <node id="n421" label="fn:string-equal" shape="diamond" color="#00ff00" style="solid"/>
                <node id="n423" label=":whitelist" shape="parallelogram" color="lightblue" style="solid"/>
                <node id="n422" label="#string:Allow " shape="parallelogram" color="#FFEE88" style="solid"/>
            </record>
        </record>
        <edge from="n419" style="solid" to="n421"/>
    </cluster>
    <edge from="n393" style="solid" to="n419"/>
    <node id="n427" label="Policy::Default-Deny-Policy"/>
    <edge from="n61" style="solid" to="n427"/>
    <cluster id="n429" style="invis">
        <node id="n428" label="Rule::Default-Deny-Rule" shape="octagon" color="red" style="filled"/>
    </cluster>
    <edge from="n427" style="solid" to="n428"/>
</graph>

x.svg