...
Examines all the
<AttributeFilterPolicyGroup>
elements provided (for instance across multiple files) in an unspecified order.Examines all the
<AttributeFilterPolicy>
elements within each<AttributeFilterPolicyGroup>
, again in an unspecified order.For each policy, if the
<PolicyRequirementRule>
is true:Applies each of the child
<AttributeRule>
elements, such that:The attributes (and their values) returned by
<PermitValueRule>
get added to a "permit list".The attributes (and their values) returned by
<DenyValueRule>
get added to a "deny list".
At the end of filtering, the final results are calculated by:
Populating the result initially from the permit list.
Removing all attribute values found in the deny list.
Removing all attributes with no values.
...