title: change ACL policy to XACML
body: <p>I'm trying to test a security method in MapReduce and i'm wondering if my approach makes sens.
  I would like to transform access control list policy which exist in MapReduce to an XACML policy to do that i take the file where the ACL is defined and copy the name and value of each propriety then put it in a policy following the XACML format.</p>
  
  <p>this is the ACL definition</p>
  
  <pre class="lang-xml prettyprint-override"><code>&lt;property&gt;
    &lt;name&gt;mapreduce.job.acl-modify-job&lt;/name&gt;
    &lt;value&gt;user &lt;/value&gt;
  &lt;/property&gt;
  &lt;property&gt;
    &lt;name&gt;mapreduce.job.acl-view-job&lt;/name&gt;
    &lt;value&gt;user &lt;/value&gt;
  &lt;/property&gt;
  </code></pre>
  
  <p>this is the policy in XACML</p>
  
   <pre class="lang-xml prettyprint-override"><code>   &lt;Policy PolicyId="GeneratedPolicy" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:ordered-permit-overrides"&gt;
    &lt;Target&gt;
      &lt;Subjects&gt;
        &lt;Subject&gt;
          &lt;SubjectMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"&gt;
            &lt;AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string"&gt;user &lt;/AttributeValue&gt;
            &lt;SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id" DataType="http://www.w3.org/2001/XMLSchema#string"/&gt;
          &lt;/SubjectMatch&gt;
        &lt;/Subject&gt;
      &lt;/Subjects&gt;
      &lt;Resources&gt;
         &lt;/AnyResource&gt;
      &lt;/Resources&gt;
    &lt;/Target&gt;
    &lt;Rule RuleId="rule1" Effect="Permit"&gt;
      &lt;Target&gt;
        &lt;Actions&gt;
          &lt;Action&gt;
            &lt;ActionMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"&gt;
              &lt;AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string"&gt;mapreduce.job.acl-view-job&lt;/AttributeValue&gt;
              &lt;ActionAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id" DataType="http://www.w3.org/2001/XMLSchema#string"/&gt;
            &lt;/ActionMatch&gt;
          &lt;/Action&gt;
        &lt;/Actions&gt;
      &lt;/Target&gt;
    &lt;/Rule&gt;
    &lt;Rule RuleId="rule2" Effect="Deny"/&gt;
  &lt;/Policy&gt;
  </code></pre>
  
  <p>is this considred correct?</p>