Eona-X constraint left operands
https://w3id.org/eonax/policy/leftOperandshttp://www.w3.org/2004/02/skos/core#Collection
- Scope note
- The custom credential-claim left operands defined by this profile.en
01ontology
Eona-X ODRL Profile
- Version
- 0.0.1
- Namespace
- https://w3id.org/eonax/policy/
- Description
- An ODRL 2.2 profile describing the exact subset of ODRL the Eona-X connector supports to express and enforce access & usage policies, extended with three credential-claim leftOperands evaluated by the connector's policy engine against presented Verifiable Credentials.en
- Comment
- Descriptive, enforcement-scoped profile: it lists precisely the ODRL terms the connector binds and evaluates. Rules are enforced for odrl:Permission only (the constraint functions are registered for the Permission rule type). Evaluation always runs as a side effect of a Dataspace-Protocol interaction (catalog, contract negotiation, transfer) or catalog discovery — never as a standalone call.en
Also available as Turtle · JSON-LD
02Terms
9 terms
- Eona-X constraint left operands
- Supported constraint & relation terms
- Supported operators
- Supported actions
- Supported rules
- Supported policy types
- Restricted Discovery Claim
- Generic Claim
- Membership
Supported constraint & relation terms
https://w3id.org/eonax/policy/supportedConstraintTermshttp://www.w3.org/2004/02/skos/core#Collection
- Scope note
- ODRL relation and constraint properties used when authoring policies in this profile. Note: odrl:assigner (and odrl:assignee where present) MUST be a Decentralized Identifier (did:...), validated by OdrlPolicyDidValidator.en
http://www.w3.org/ns/odrl/2/rightOperandhttp://www.w3.org/ns/odrl/2/operatorhttp://www.w3.org/ns/odrl/2/leftOperandhttp://www.w3.org/ns/odrl/2/orhttp://www.w3.org/ns/odrl/2/LogicalConstrainthttp://www.w3.org/ns/odrl/2/Constrainthttp://www.w3.org/ns/odrl/2/constrainthttp://www.w3.org/ns/odrl/2/actionhttp://www.w3.org/ns/odrl/2/assigneehttp://www.w3.org/ns/odrl/2/assignerhttp://www.w3.org/ns/odrl/2/target
Supported operators
https://w3id.org/eonax/policy/supportedOperatorshttp://www.w3.org/2004/02/skos/core#Collection
- Scope note
- Relational/set operators the constraint functions accept. odrl:eq and odrl:neq are scalar equality; odrl:isAnyOf is the EDC IN operator (scalar value is one of a right-operand set). odrl:hasPart is the TARGET set-containment operator (a set-valued claim contains the right-operand value) — see Eona-X/backlog#587.en
Supported actions
https://w3id.org/eonax/policy/supportedActionshttp://www.w3.org/2004/02/skos/core#Collection
- Scope note
- Actions bound into every rule scope by PolicyEvaluationExtension: the base odrl:use plus transfer, share and distribute. NOTE: odrl:share is deprecated in ODRL 2.2 but is still bound by the connector.en
Supported rules
https://w3id.org/eonax/policy/supportedRuleshttp://www.w3.org/2004/02/skos/core#Collection
- Scope note
- Only odrl:Permission is enforced: the credential constraint functions are registered for the Permission rule type. odrl:Prohibition / odrl:Duty may appear in a policy but carry no custom enforcement in this profile.en
Supported policy types
https://w3id.org/eonax/policy/supportedPolicyTypeshttp://www.w3.org/2004/02/skos/core#Collection
- Scope note
- ODRL policy subclasses the connector processes.en
Restricted Discovery Claim
https://w3id.org/eonax/policy/RestrictedDiscoveryClaimhttp://www.w3.org/2004/02/skos/core#Concepthttp://www.w3.org/ns/odrl/2/LeftOperand
- Definition
- Constraint left operand equivalent to GenericClaim but evaluated in the catalog-discovery path, so that a dataset's visibility in the federated catalog is gated on a credential claim.en
- Note
- Addressing form: eox-policy:RestrictedDiscoveryClaim.$.<CredentialType>.<jsonPath>. Bound to the catalog.discovery, contract.negotiation and transfer rule scopes; it is the discovery-time counterpart of eox-policy:GenericClaim.en
- Scope note
- Supported operators today: odrl:eq, odrl:neq, set-membership (EDC IN / odrl:isAnyOf). TARGET (Eona-X/backlog#587): odrl:hasPart for set-valued claims.en
- Example
- eox-policy:RestrictedDiscoveryClaim.$.MembershipCredential.groups hasPart "EMDS"en
Generic Claim
https://w3id.org/eonax/policy/GenericClaimhttp://www.w3.org/2004/02/skos/core#Concepthttp://www.w3.org/ns/odrl/2/LeftOperand
- Definition
- Constraint left operand that addresses an arbitrary claim inside a presented credential's credentialSubject and compares it against the right operand.en
- Note
- Addressing form: eox-policy:GenericClaim.$.<CredentialType>.<jsonPath> — e.g. eox-policy:GenericClaim.$.MembershipCredential.groups. After the $ the first segment selects the credential type; the remaining dotted path selects a field in credentialSubject[0] claims. Bound to the contract.negotiation and transfer rule scopes.en
- Scope note
- Supported operators today: odrl:eq, odrl:neq, and set-membership (EDC operator IN, i.e. odrl:isAnyOf) where a scalar claim value must be one of a right-operand list. TARGET (Eona-X/backlog#587): odrl:hasPart, where a SET-valued claim (e.g. groups) must CONTAIN the right-operand value — the direction eq/neq/isAnyOf cannot express.en
- Example
- eox-policy:GenericClaim.$.MembershipCredential.groups hasPart "EMDS"en
Membership
https://w3id.org/eonax/policy/Membershiphttp://www.w3.org/2004/02/skos/core#Concepthttp://www.w3.org/ns/odrl/2/LeftOperand
- Definition
- Constraint left operand asserting that the presenting participant holds a valid MembershipCredential in the dataspace.en
- Note
- Usage: leftOperand eox-policy:Membership, operator odrl:eq, rightOperand "active". Satisfied when the presented credentials contain at least one credential whose type is MembershipCredential (presence == active; the right operand MUST be the literal "active"). Bound to the transfer, catalog, contract.negotiation and catalog.discovery rule scopes.en
- Example
- eox-policy:Membership eq "active"en