Updated policy for fedora internal calls to work on ipv6 localhosts a…

…s well as per http://fedora-commons.org/jira/browse/FCREPO-581.
fcrepo3 · Dec 18, 2009 · 9abeab0 · 9abeab0
1 parent 3350a83
commit 9abeab0
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/fcrepo-security/fcrepo-security-pdp/src/pdp_home/policies/access-fedora-internal-call.xml b/fcrepo-security/fcrepo-security-pdp/src/pdp_home/policies/access-fedora-internal-call.xml
@@ -28,6 +28,12 @@
 					AttributeId="urn:fedora:names:fedora:2.1:environment:httpRequest:clientIpAddress"
 					DataType="http://www.w3.org/2001/XMLSchema#string" />
 			</EnvironmentMatch>
+			<EnvironmentMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
+				<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">::1</AttributeValue>
+				<EnvironmentAttributeDesignator
+					AttributeId="urn:fedora:names:fedora:2.1:environment:httpRequest:clientIpAddress"
+					DataType="http://www.w3.org/2001/XMLSchema#string" />
+			</EnvironmentMatch>
 		</Environment>
 	</Target>
 	<Rule Effect="Permit" RuleId="au:edu:mq:melcoe:ramp:fedora:xacml:2.0:rule:generic-permit" />