<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
	elementFormDefault="qualified" attributeFormDefault="unqualified">
	<xs:complexType name="BODYType">
		<xs:sequence>
			<xs:element name="CONFIGURATION" type="CONFIGURATIONType" />
			<xs:element name="STATUS" type="STATUSType" minOccurs="0" />
			<xs:element ref="SECURITY_PARAMETERS" minOccurs="0" />
		</xs:sequence>
	</xs:complexType>
	<xs:complexType name="CONFIGURATIONType">
		<xs:choice>
			<xs:element ref="Policy" />
			<xs:element ref="PolicySet" />
		</xs:choice>
	</xs:complexType>
	<xs:complexType name="DATE_OF_CREATIONType">
		<xs:attribute name="value" type="xs:dateTime" use="required" />
	</xs:complexType>
	<xs:complexType name="HEADERType">
		<xs:all>
			<xs:element name="RESOURCE_IDENTIFIER" type="RESOURCE_IDENTIFIERType" />
			<xs:element name="RESOURCE_TYPE" type="RESOURCE_TYPEType" />
			<xs:element name="RESOURCE_KIND" type="RESOURCE_KINDType" />
			<xs:element name="RESOURCE_URI" type="RESOURCE_URIType" />
			<xs:element name="DATE_OF_CREATION" type="DATE_OF_CREATIONType" />
		</xs:all>
	</xs:complexType>
	<xs:complexType name="RESOURCE_IDENTIFIERType">
		<xs:attribute name="value" type="xs:string" use="required" />
	</xs:complexType>
	<xs:complexType name="RESOURCE_KINDType">
		<xs:attribute name="value" use="required">
			<xs:simpleType>
				<xs:restriction base="xs:string">
					<xs:enumeration value="SecurityPolicyDSResources" />
					<xs:enumeration value="PendingDSResources" />
				</xs:restriction>
			</xs:simpleType>
		</xs:attribute>
	</xs:complexType>
	<xs:element name="RESOURCE_PROFILE">
		<xs:complexType>
			<xs:sequence>
				<xs:element name="HEADER" type="HEADERType" />
				<xs:element name="BODY" type="BODYType" />
			</xs:sequence>
		</xs:complexType>
	</xs:element>
	<xs:complexType name="RESOURCE_TYPEType">
		<xs:attribute name="value" use="required">
			<xs:simpleType>
				<xs:restriction base="xs:string">
					<xs:enumeration value="SecurityPolicyDSResourceType" />
				</xs:restriction>
			</xs:simpleType>
		</xs:attribute>
	</xs:complexType>
	<xs:complexType name="RESOURCE_URIType">
		<xs:attribute name="value" type="xs:string" use="required" />
	</xs:complexType>
	<xs:element name="SECURITY_PARAMETERS" type="xs:string" />
	<xs:complexType name="STATUSType" />
	<!-- -->
	<xs:element name="PolicySet" type="PolicySetType" />
	<xs:complexType name="PolicySetType">
		<xs:sequence>
			<xs:element ref="Description" minOccurs="0" />
			<xs:element ref="PolicySetDefaults" minOccurs="0" />
			<xs:element ref="Target" />
			<xs:choice minOccurs="0" maxOccurs="unbounded">
				<xs:element ref="PolicySet" />
				<xs:element ref="Policy" />
				<xs:element ref="PolicySetIdReference" />
				<xs:element ref="PolicyIdReference" />
			</xs:choice>
			<xs:element ref="Obligations" minOccurs="0" />
		</xs:sequence>
		<xs:attribute name="PolicySetId" type="xs:anyURI" use="required" />
		<xs:attribute name="PolicyCombiningAlgId" type="xs:anyURI"
			use="required" />
	</xs:complexType>
	<!-- -->
	<xs:element name="PolicySetIdReference" type="xs:anyURI" />
	<xs:element name="PolicyIdReference" type="xs:anyURI" />
	<!-- -->
	<xs:element name="PolicySetDefaults" type="DefaultsType" />
	<xs:element name="PolicyDefaults" type="DefaultsType" />
	<xs:complexType name="DefaultsType">
		<xs:sequence>
			<xs:choice>
				<xs:element ref="XPathVersion" />
			</xs:choice>
		</xs:sequence>
	</xs:complexType>
	<!-- -->
	<xs:element name="XPathVersion" type="xs:anyURI" />
	<!-- -->
	<xs:element name="Policy" type="PolicyType" />
	<xs:complexType name="PolicyType">
		<xs:sequence>
			<xs:element ref="Description" minOccurs="0" />
			<xs:element ref="PolicyDefaults" minOccurs="0" />
			<xs:element ref="Target" />
			<xs:element ref="Rule" minOccurs="0" maxOccurs="unbounded" />
			<xs:element ref="Obligations" minOccurs="0" />
		</xs:sequence>
		<xs:attribute name="PolicyId" type="xs:anyURI" use="required" />
		<xs:attribute name="RuleCombiningAlgId" type="xs:anyURI"
			use="required" />
	</xs:complexType>
	<!-- -->
	<xs:element name="Description" type="xs:string" />
	<!-- -->
	<xs:element name="Rule" type="RuleType" />
	<xs:complexType name="RuleType">
		<xs:sequence>
			<xs:element ref="Description" minOccurs="0" />
			<xs:element ref="Target" minOccurs="0" />
			<xs:element ref="Condition" minOccurs="0" />
		</xs:sequence>
		<xs:attribute name="RuleId" type="xs:anyURI" use="required" />
		<xs:attribute name="Effect" type="EffectType" use="required" />
	</xs:complexType>
	<!-- -->
	<xs:simpleType name="EffectType">
		<xs:restriction base="xs:string">
			<xs:enumeration value="Permit" />
			<xs:enumeration value="Deny" />
		</xs:restriction>
	</xs:simpleType>
	<!-- -->
	<xs:element name="Target" type="TargetType" />
	<xs:complexType name="TargetType">
		<xs:sequence>
			<xs:element ref="Subjects" minOccurs="0" />
			<xs:element ref="Resources" minOccurs="0" />
			<xs:element ref="Actions" minOccurs="0" />
		</xs:sequence>
	</xs:complexType>
	<!-- -->
	<xs:element name="Subjects" type="SubjectsType" />
	<xs:complexType name="SubjectsType">
		<xs:choice>
			<xs:element ref="Subject" maxOccurs="unbounded" />
			<xs:element ref="AnySubject" />
		</xs:choice>
	</xs:complexType>
	<!-- -->
	<xs:element name="Subject" type="SubjectType" />
	<xs:complexType name="SubjectType">
		<xs:sequence>
			<xs:element ref="SubjectMatch" maxOccurs="unbounded" />
		</xs:sequence>
	</xs:complexType>
	<!-- -->
	<xs:element name="AnySubject" />
	<!-- -->
	<xs:element name="Resources" type="ResourcesType" />
	<xs:complexType name="ResourcesType">
		<xs:choice>
			<xs:element ref="Resource" maxOccurs="unbounded" />
			<xs:element ref="AnyResource" />
		</xs:choice>
	</xs:complexType>
	<!-- -->
	<xs:element name="AnyResource" />
	<!-- -->
	<xs:element name="Resource" type="ResourceType" />
	<xs:complexType name="ResourceType">
		<xs:sequence>
			<xs:element ref="ResourceMatch" maxOccurs="unbounded" />
		</xs:sequence>
	</xs:complexType>
	<!-- -->
	<xs:element name="Actions" type="ActionsType" />
	<xs:complexType name="ActionsType">
		<xs:choice>
			<xs:element ref="Action" maxOccurs="unbounded" />
			<xs:element ref="AnyAction" />
		</xs:choice>
	</xs:complexType>
	<!-- -->
	<xs:element name="AnyAction" />
	<!-- -->
	<xs:element name="Action" type="ActionType" />
	<xs:complexType name="ActionType">
		<xs:sequence>
			<xs:element ref="ActionMatch" maxOccurs="unbounded" />
		</xs:sequence>
	</xs:complexType>
	<!-- -->
	<xs:element name="SubjectMatch" type="SubjectMatchType" />
	<xs:complexType name="SubjectMatchType">
		<xs:sequence>
			<xs:element ref="AttributeValue" />
			<xs:choice>
				<xs:element ref="SubjectAttributeDesignator" />
				<xs:element ref="AttributeSelector" />
			</xs:choice>
		</xs:sequence>
		<xs:attribute name="MatchId" type="xs:anyURI" use="required" />
	</xs:complexType>
	<!-- -->
	<xs:element name="ResourceMatch" type="ResourceMatchType" />
	<xs:complexType name="ResourceMatchType">
		<xs:sequence>
			<xs:element ref="AttributeValue" />
			<xs:choice>
				<xs:element ref="ResourceAttributeDesignator" />
				<xs:element ref="AttributeSelector" />
			</xs:choice>
		</xs:sequence>
		<xs:attribute name="MatchId" type="xs:anyURI" use="required" />
	</xs:complexType>
	<!-- -->
	<xs:element name="ActionMatch" type="ActionMatchType" />
	<xs:complexType name="ActionMatchType">
		<xs:sequence>
			<xs:element ref="AttributeValue" />
			<xs:choice>
				<xs:element ref="ActionAttributeDesignator" />
				<xs:element ref="AttributeSelector" />
			</xs:choice>
		</xs:sequence>
		<xs:attribute name="MatchId" type="xs:anyURI" use="required" />
	</xs:complexType>
	<!-- -->
	<xs:element name="AttributeSelector" type="AttributeSelectorType" />
	<xs:complexType name="AttributeSelectorType">
		<xs:attribute name="RequestContextPath" type="xs:string"
			use="required" />
		<xs:attribute name="DataType" type="xs:anyURI" use="required" />
		<xs:attribute name="MustBePresent" type="xs:boolean" use="optional"
			default="false" />
	</xs:complexType>
	<!-- -->
	<xs:element name="ResourceAttributeDesignator" type="AttributeDesignatorType" />
	<xs:element name="ActionAttributeDesignator" type="AttributeDesignatorType" />
	<xs:element name="EnvironmentAttributeDesignator" type="AttributeDesignatorType" />
	<!-- -->
	<xs:complexType name="AttributeDesignatorType">
		<xs:attribute name="AttributeId" type="xs:anyURI" use="required" />
		<xs:attribute name="DataType" type="xs:anyURI" use="required" />
		<xs:attribute name="Issuer" type="xs:string" use="optional" />
		<xs:attribute name="MustBePresent" type="xs:boolean" use="optional"
			default="false" />
	</xs:complexType>
	<!-- -->
	<xs:element name="SubjectAttributeDesignator" type="SubjectAttributeDesignatorType" />
	<xs:complexType name="SubjectAttributeDesignatorType">
		<xs:complexContent>
			<xs:extension base="AttributeDesignatorType">
				<xs:attribute name="SubjectCategory" type="xs:anyURI"
					use="optional" default="urn:oasis:names:tc:1.0:subject-category:access-subject" />
			</xs:extension>
		</xs:complexContent>
	</xs:complexType>
	<!-- -->
	<xs:element name="AttributeValue" type="AttributeValueType" />
	<xs:complexType name="AttributeValueType" mixed="true">
		<xs:sequence>
			<xs:any namespace="##any" processContents="lax" minOccurs="0"
				maxOccurs="unbounded" />
		</xs:sequence>
		<xs:attribute name="DataType" type="xs:anyURI" use="required" />
		<xs:anyAttribute namespace="##any" processContents="lax" />
	</xs:complexType>
	<!-- -->
	<xs:element name="Function" type="FunctionType" />
	<xs:complexType name="FunctionType">
		<xs:attribute name="FunctionId" type="xs:anyURI" use="required" />
	</xs:complexType>
	<!-- -->
	<xs:element name="Apply" type="ApplyType" />
	<xs:element name="Condition" type="ApplyType" />
	<!-- -->
	<xs:complexType name="ApplyType">
		<xs:choice minOccurs="0" maxOccurs="unbounded">
			<xs:element ref="Apply" />
			<xs:element ref="Function" />
			<xs:element ref="AttributeValue" />
			<xs:element ref="SubjectAttributeDesignator" />
			<xs:element ref="ResourceAttributeDesignator" />
			<xs:element ref="ActionAttributeDesignator" />
			<xs:element ref="EnvironmentAttributeDesignator" />
			<xs:element ref="AttributeSelector" />
		</xs:choice>
		<xs:attribute name="FunctionId" type="xs:anyURI" use="required" />
		<!-- Legal types for the first and subsequent operands are defined in the 
			accompanying table -->
	</xs:complexType>
	<!-- -->
	<xs:element name="Obligations" type="ObligationsType" />
	<xs:complexType name="ObligationsType">
		<xs:sequence>
			<xs:element ref="Obligation" maxOccurs="unbounded" />
		</xs:sequence>
	</xs:complexType>
	<!-- -->
	<xs:element name="Obligation" type="ObligationType" />
	<xs:complexType name="ObligationType">
		<xs:sequence>
			<xs:element ref="AttributeAssignment" minOccurs="0"
				maxOccurs="unbounded" />
		</xs:sequence>
		<xs:attribute name="ObligationId" type="xs:anyURI" use="required" />
		<xs:attribute name="FulfillOn" type="EffectType" use="required" />
	</xs:complexType>
	<!-- -->
	<xs:element name="AttributeAssignment" type="AttributeAssignmentType" />
	<xs:complexType name="AttributeAssignmentType" mixed="true">
		<xs:complexContent mixed="true">
			<xs:extension base="AttributeValueType">
				<xs:attribute name="AttributeId" type="xs:anyURI" use="required" />
			</xs:extension>
		</xs:complexContent>
	</xs:complexType>
	<!-- -->
</xs:schema>
