<?xml version="1.0" encoding="UTF-8"?>
    <!-- Auflistung aller Dokumente mittels setId, die ausgeblendet werden sollen -->
    <Policy PolicyId="urn:elga:bes:2013:1.2.3.2.2.2" 
        RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining- algorithm:permit-overrides" 
        xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os">
        <Target/>
        <Rule Effect="Deny" RuleId="urn:elga:bes:2013:denyrule">
            <Condition>
                <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset">
                    <ResourceAttributeDesignator AttributeId="urn:elga:bes:2013:xds:document-id" 
                        DataType="http://www.w3.org/2001/XMLSchema#string"/>
                    <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag">
                        <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">
                            urn:uuid:24c8d24b-2afa-4458-b350-c81cd281b081^^^&amp;1.2.40.0.34.99.111.1.1&amp;ISO^
                                urn:elga:iti:xds:2014:ownDocument_setId^&amp;1.2.40.0.34.99.999&amp;ISO</AttributeValue>
                        <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">
                            urn:uuid:25c8d24b-2afa-4458-b350-c81cd281b082^^^&amp;1.2.40.0.34.99.111.1.1&amp;ISO^
                                urn:elga:iti:xds:2014:ownDocument_setId^&amp;1.2.40.0.34.99.999&amp;ISO</AttributeValue>
                        <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">
                            urn:uuid:26c8d24b-2afa-4458-b350-c81cd281b083^^^&amp;1.2.40.0.34.99.111.1.1&amp;ISO^
                                urn:elga:iti:xds:2014:ownDocument_setId^&amp;1.2.40.0.34.99.999&amp;ISO</AttributeValue>
                    </Apply>
                </Apply>
            </Condition>
        </Rule>
    </Policy>
