policy.xml

<policy-set combine="first-matching-target" description="Webinos-test">
	<policy combine="first-applicable" description="PZOwner">
		<target>
			<subject>
				<subject-match attr="user-id" match="user1"/>
			</subject>
		</target>
		<rule effect="prompt-oneshot">
			<condition combine="or">
				<resource-match attr="api-feature" match="http://www.w3.org/ns/api-perms/calendar.read"/>
				<resource-match attr="api-feature" match="http://www.w3.org/ns/api-perms/contacts.read"/>
				<resource-match attr="api-feature" match="http://wacapps.net/api/devicestatus"/>
			</condition>
		</rule>
	
		<rule effect="permit">
			<condition combine="or">
				<resource-match attr="api-feature" match="http://webinos.org/api/context.read"/>
				<resource-match attr="api-feature" match="http://webinos.org/api/discovery"/>
				<resource-match attr="api-feature" match="http://webinos.org/api/context.store"/>
			</condition>
		</rule>

		<rule effect="deny">
			<condition>
				<resource-match attr="api-feature" match="*"/>
			</condition>
		</rule>
	</policy>
	<policy combine="first-applicable" description="PZFriend">
		<target>
			<subject>
				<subject-match attr="user-id" match="user2"/>
			</subject>
		</target>
		<rule effect="permit">
			<condition combine="or">
				<resource-match attr="api-feature" match="http://www.w3.org/ns/api-perms/contacts.read"/>
			</condition>
		</rule>
		<rule effect="prompt-oneshot">
			<condition combine="or">
				<resource-match attr="api-feature" match="http://www.w3.org/ns/api-perms/calendar.read"/>
			</condition>
		</rule>
		<rule effect="deny">
			<condition>
				<resource-match attr="api-feature" match="*"/>
			</condition>
		</rule>
	</policy>
	<policy combine="first-applicable" description="untrusted">
		<rule effect="deny">
			<condition>
				<resource-match attr="api-feature" match="*"/>
			</condition>
		</rule>
	</policy>
</policy-set>