@@ -55,14 +55,21 @@ Connectivity Standards Alliance
5555508 Second Street, Suite 206
5656Davis, CA 95616, USA
5757-->
58- <cluster xmlns : xsi =" http://www.w3.org/2001/XMLSchema-instance" xsi : schemaLocation =" types types.xsd cluster cluster.xsd" id =" 0x001F" name =" Access Control Cluster" revision =" 1 " >
58+ <cluster xmlns : xsi =" http://www.w3.org/2001/XMLSchema-instance" xsi : schemaLocation =" types types.xsd cluster cluster.xsd" id =" 0x001F" name =" Access Control Cluster" revision =" 2 " >
5959 <revisionHistory >
60- <revision revision =" 1" summary =" Initial Release" />
60+ <revision revision =" 1" summary =" Initial revision" />
61+ <revision revision =" 2" summary =" Added Managed Device feature, Extension feature, fixed conformance" />
6162 </revisionHistory >
6263 <clusterIds >
6364 <clusterId id =" 0x001F" name =" AccessControl" />
6465 </clusterIds >
6566 <classification hierarchy =" base" role =" utility" picsCode =" ACL" scope =" Node" />
67+ <features >
68+ <feature bit =" 0" code =" EXTS" name =" Extension" summary =" Device provides ACL Extension attribute" >
69+ <optionalConform />
70+ </feature >
71+ <feature bit =" 1" code =" MNGD" name =" ManagedDevice" summary =" Device is managed" />
72+ </features >
6673 <dataTypes >
6774 <enum name =" AccessControlEntryAuthModeEnum" >
6875 <item value =" 1" name =" PASE" summary =" Passcode authenticated session" >
@@ -95,6 +102,20 @@ Davis, CA 95616, USA
95102 <mandatoryConform />
96103 </item >
97104 </enum >
105+ <enum name =" AccessRestrictionTypeEnum" >
106+ <item value =" 0" name =" AttributeAccessForbidden" summary =" Clients on this fabric are currently forbidden from reading and writing an attribute" >
107+ <mandatoryConform />
108+ </item >
109+ <item value =" 1" name =" AttributeWriteForbidden" summary =" Clients on this fabric are currently forbidden from writing an attribute" >
110+ <mandatoryConform />
111+ </item >
112+ <item value =" 2" name =" CommandForbidden" summary =" Clients on this fabric are currently forbidden from invoking a command" >
113+ <mandatoryConform />
114+ </item >
115+ <item value =" 3" name =" EventForbidden" summary =" Clients on this fabric are currently forbidden from reading an event" >
116+ <mandatoryConform />
117+ </item >
118+ </enum >
98119 <enum name =" ChangeTypeEnum" >
99120 <item value =" 0" name =" Changed" summary =" Entry or extension was changed" >
100121 <mandatoryConform />
@@ -153,6 +174,45 @@ Davis, CA 95616, USA
153174 <mandatoryConform />
154175 </field >
155176 </struct >
177+ <struct name =" AccessRestrictionEntryStruct" >
178+ <field id =" 0" name =" Endpoint" type =" endpoint-no" >
179+ <access fabricSensitive =" true" />
180+ <mandatoryConform />
181+ </field >
182+ <field id =" 1" name =" Cluster" type =" cluster-id" >
183+ <access fabricSensitive =" true" />
184+ <mandatoryConform />
185+ </field >
186+ <field id =" 2" name =" Restrictions" type =" list" default =" desc" >
187+ <entry type =" AccessRestrictionStruct" />
188+ <access fabricSensitive =" true" />
189+ <mandatoryConform />
190+ <constraint type =" minCount" value =" 1" />
191+ </field >
192+ <access fabricScoped =" true" />
193+ </struct >
194+ <struct name =" AccessRestrictionStruct" >
195+ <field id =" 0" name =" Type" type =" AccessRestrictionTypeEnum" >
196+ <mandatoryConform />
197+ </field >
198+ <field id =" 1" name =" ID" type =" uint32" >
199+ <quality nullable =" true" />
200+ <mandatoryConform />
201+ </field >
202+ </struct >
203+ <struct name =" CommissioningAccessRestrictionEntryStruct" >
204+ <field id =" 0" name =" Endpoint" type =" endpoint-no" >
205+ <mandatoryConform />
206+ </field >
207+ <field id =" 1" name =" Cluster" type =" cluster-id" >
208+ <mandatoryConform />
209+ </field >
210+ <field id =" 2" name =" Restrictions" type =" list" default =" desc" >
211+ <entry type =" AccessRestrictionStruct" />
212+ <mandatoryConform />
213+ <constraint type =" minCount" value =" 1" />
214+ </field >
215+ </struct >
156216 </dataTypes >
157217 <attributes >
158218 <attribute id =" 0x0000" name =" ACL" type =" list" default =" desc" >
@@ -164,7 +224,9 @@ Davis, CA 95616, USA
164224 <attribute id =" 0x0001" name =" Extension" type =" list" default =" desc" >
165225 <entry type =" AccessControlExtensionStruct" />
166226 <access read =" true" write =" true" readPrivilege =" admin" writePrivilege =" admin" fabricScoped =" true" />
167- <optionalConform />
227+ <mandatoryConform >
228+ <feature name =" EXTS" />
229+ </mandatoryConform >
168230 <constraint type =" desc" />
169231 </attribute >
170232 <attribute id =" 0x0002" name =" SubjectsPerAccessControlEntry" type =" uint16" default =" 4" >
@@ -185,7 +247,45 @@ Davis, CA 95616, USA
185247 <mandatoryConform />
186248 <constraint type =" min" value =" 4" />
187249 </attribute >
250+ <attribute id =" 0x0005" name =" CommissioningARL" type =" list" default =" []" >
251+ <entry type =" CommissioningAccessRestrictionEntryStruct" />
252+ <access read =" true" readPrivilege =" view" />
253+ <quality changeOmitted =" false" nullable =" false" scene =" false" persistence =" fixed" reportable =" false" sourceAttribution =" false" quieterReporting =" false" />
254+ <mandatoryConform >
255+ <feature name =" MNGD" />
256+ </mandatoryConform >
257+ <constraint type =" desc" />
258+ </attribute >
259+ <attribute id =" 0x0006" name =" ARL" type =" list" default =" []" >
260+ <entry type =" AccessRestrictionEntryStruct" />
261+ <access read =" true" readPrivilege =" view" fabricScoped =" true" />
262+ <mandatoryConform >
263+ <feature name =" MNGD" />
264+ </mandatoryConform >
265+ <constraint type =" desc" />
266+ </attribute >
188267 </attributes >
268+ <commands >
269+ <command id =" 0x00" name =" ReviewFabricRestrictions" direction =" commandToServer" response =" ReviewFabricRestrictionsResponse" >
270+ <access invokePrivilege =" admin" fabricScoped =" true" />
271+ <mandatoryConform >
272+ <feature name =" MNGD" />
273+ </mandatoryConform >
274+ <field id =" 0" name =" ARL" type =" list" default =" desc" >
275+ <entry type =" CommissioningAccessRestrictionEntryStruct" />
276+ <mandatoryConform />
277+ <constraint type =" desc" />
278+ </field >
279+ </command >
280+ <command id =" 0x01" name =" ReviewFabricRestrictionsResponse" direction =" responseFromServer" >
281+ <mandatoryConform >
282+ <feature name =" MNGD" />
283+ </mandatoryConform >
284+ <field id =" 0" name =" Token" type =" uint64" >
285+ <mandatoryConform />
286+ </field >
287+ </command >
288+ </commands >
189289 <events >
190290 <event id =" 0x00" name =" AccessControlEntryChanged" priority =" info" >
191291 <access readPrivilege =" admin" fabricSensitive =" true" />
@@ -210,7 +310,9 @@ Davis, CA 95616, USA
210310 </event >
211311 <event id =" 0x01" name =" AccessControlExtensionChanged" priority =" info" >
212312 <access readPrivilege =" admin" fabricSensitive =" true" />
213- <mandatoryConform />
313+ <mandatoryConform >
314+ <feature name =" EXTS" />
315+ </mandatoryConform >
214316 <field id =" 1" name =" AdminNodeID" type =" node-id" >
215317 <quality nullable =" true" />
216318 <mandatoryConform />
@@ -229,5 +331,22 @@ Davis, CA 95616, USA
229331 <mandatoryConform />
230332 </field >
231333 </event >
334+ <event id =" 0x02" name =" FabricRestrictionReviewUpdate" priority =" info" >
335+ <access readPrivilege =" admin" fabricSensitive =" true" />
336+ <mandatoryConform >
337+ <feature name =" MNGD" />
338+ </mandatoryConform >
339+ <field id =" 0" name =" Token" type =" uint64" >
340+ <mandatoryConform />
341+ </field >
342+ <field id =" 1" name =" Instruction" type =" string" >
343+ <optionalConform />
344+ <constraint type =" maxLength" value =" 512" />
345+ </field >
346+ <field id =" 2" name =" ARLRequestFlowUrl" type =" string" >
347+ <optionalConform />
348+ <constraint type =" maxLength" value =" 256" />
349+ </field >
350+ </event >
232351 </events >
233352</cluster >
0 commit comments