From 9abeab0db39f2855a1c0836a4e70677e4119ce37 Mon Sep 17 00:00:00 2001
From: Nishen Naidoo <nishen.naidoo@mq.edu.au>
Date: Fri, 18 Dec 2009 09:24:24 +0000
Subject: [PATCH] Updated policy for fedora internal calls to work on ipv6
 localhosts as well as per http://fedora-commons.org/jira/browse/FCREPO-581.

---
 .../src/pdp_home/policies/access-fedora-internal-call.xml   | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/fcrepo-security/fcrepo-security-pdp/src/pdp_home/policies/access-fedora-internal-call.xml b/fcrepo-security/fcrepo-security-pdp/src/pdp_home/policies/access-fedora-internal-call.xml
index 951e61e21..62b4866ba 100644
--- a/fcrepo-security/fcrepo-security-pdp/src/pdp_home/policies/access-fedora-internal-call.xml
+++ b/fcrepo-security/fcrepo-security-pdp/src/pdp_home/policies/access-fedora-internal-call.xml
@@ -28,6 +28,12 @@
 					AttributeId="urn:fedora:names:fedora:2.1:environment:httpRequest:clientIpAddress"
 					DataType="http://www.w3.org/2001/XMLSchema#string" />
 			</EnvironmentMatch>
+			<EnvironmentMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
+				<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">::1</AttributeValue>
+				<EnvironmentAttributeDesignator
+					AttributeId="urn:fedora:names:fedora:2.1:environment:httpRequest:clientIpAddress"
+					DataType="http://www.w3.org/2001/XMLSchema#string" />
+			</EnvironmentMatch>
 		</Environment>
 	</Target>
 	<Rule Effect="Permit" RuleId="au:edu:mq:melcoe:ramp:fedora:xacml:2.0:rule:generic-permit" />