Add support for associating roles with privileges

Rene2mt · Jan 15, 2024 · d50a31b · d50a31b
1 parent 4f02dac
commit d50a31b
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/src/metaschema/oscal_implementation-common_metaschema.xml b/src/metaschema/oscal_implementation-common_metaschema.xml
@@ -429,7 +429,19 @@
                   <field ref="function-performed" min-occurs="1" max-occurs="unbounded">
                         <group-as name="functions-performed" in-json="ARRAY"/>
                   </field>
+
+                  <!-- Todo: will need to create contstraint such that referenced role-id must exist in the metadata -->
+                  <field ref="responsible-role" min-occurs="0" max-occurs="unbounded">
+                        <group-as name="responsible-roles" in-json="ARRAY"/>
+                  </field>
+
             </model>
+            <constraints>              
+                  <!-- References to role-id -->
+                  <index-has-key name="index-metadata-role-id" target="responsible-role/@role-id">
+                        <key-field target="@role-id"/>
+                  </index-has-key>
+            </constraints>
       </define-assembly>
       <define-field name="function-performed" as-type="string">
             <formal-name>Functions Performed</formal-name>