<?xml version="1.0" encoding="utf-8"?>
<dds xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:noNamespaceSchemaLocation="https://www.omg.org/spec/DDS-SECURITY/20170901/omg_shared_ca_permissions.xsd">
    <permissions>
        <grant name="OpenSplicePermissions">
            <subject_name>CN=CHAM500 cert,O=Internet Widgits Pty Ltd,ST=Some-State,C=NL</subject_name>
            <validity>
                <!-- Format is CCYY-MM-DDThh:mm:ss[Z|(+|-)hh:mm] in GMT -->
                <not_before>2015-09-15T01:00:00</not_before>
                <not_after>2115-09-15T01:00:00</not_after>
            </validity>
            <allow_rule>
                <domains>
                    <id_range>
                        <min>0</min>
                        <max>230</max>
                    </id_range>
                </domains>
                <publish>
                    <topics>
                        <topic>K*</topic>
                        <topic>*OldMessage</topic>
                        <topic>OldMessanger</topic>
                        <topic>NewMessage</topic>
                    </topics>
        <partitions>
      <partition>Apart</partition>
      <partition>Bpa?t*</partition>
        </partitions>
                </publish>
                <subscribe>
                    <topics>
                        <topic>K*</topic>
                        <topic>*OldMessage</topic>
                        <topic>OldMessanger</topic>
                        <topic>NewMessage</topic>
                    </topics>
        <partitions>
      <partition>Apart</partition>
      <partition>Bpa?t*</partition>
        </partitions>
                </subscribe>
            </allow_rule>
            <deny_rule>
                <domains>
                    <id_range>
                        <min>0</min>
                        <max>230</max>
                    </id_range>
                </domains>
                <publish>
                    <topics>
                        <topic>P*</topic>
                        <topic>*WrongMessage</topic>
                        <topic>FakeMessanger</topic>
                        <topic>ChangedMessage</topic>
                    </topics>
        <partitions>
      <partition>Apart</partition>
      <partition>Bpa?t*</partition>
        </partitions>
                </publish>
                <subscribe>
                    <topics>
                        <topic>P*</topic>
                        <topic>*WrongMessage</topic>
                        <topic>FakeMessanger</topic>
                        <topic>ChangedMessage</topic>
                    </topics>
        <partitions>
      <partition>Apart</partition>
      <partition>Bpa?t*</partition>
        </partitions>
                </subscribe>
            </deny_rule>

            <default>DENY</default>
        </grant>
        <grant name="SpareNodeOpenSplicePermissions">
            <subject_name>CN=Spare cert,O=Internet Widgits Pty Ltd,ST=Some-State,C=NL</subject_name>
            <validity>
                <!-- Format is CCYY-MM-DDThh:mm:ss[Z|(+|-)hh:mm] in GMT -->
                <not_before>2015-09-15T01:00:00</not_before>
                <not_after>2115-09-15T01:00:00</not_after>
            </validity>
            <allow_rule>
                <domains>
                <!-- All domains -->
                 <id>20</id>
                 <id>30</id>
                 <id_range>
                     <min>0</min>
                     <max>23</max>
                 </id_range>
                 <id_range>
                     <min>100</min>
                     <max>120</max>
                 </id_range>
                 <id>200</id>
               </domains>
                <publish>
                    <topics>
                        <topic>K*</topic>
                        <topic>*OldMessage</topic>
                        <topic>OldMessanger</topic>
                        <topic>NewMessage</topic>
                    </topics>
        <partitions>
      <partition>Apart</partition>
      <partition>Bpa?t*</partition>
        </partitions>
                </publish>
                <subscribe>
                    <topics>
                        <topic>K*</topic>
                        <topic>*OldMessage</topic>
                        <topic>OldMessanger</topic>
                        <topic>NewMessage</topic>
                    </topics>
        <partitions>
      <partition>Apart</partition>
      <partition>Bpa?t*</partition>
        </partitions>
                </subscribe>
            </allow_rule>
            <deny_rule>
                <domains>
                 <id_range>
                     <min>0</min>
                     <max>23</max>
                 </id_range>
                 <id_range>
                     <min>100</min>
                     <max>120</max>
                 </id_range>
                 <id>200</id>
                </domains>
                <publish>
                    <topics>
                        <topic>P*</topic>
                        <topic>*WrongMessage</topic>
                        <topic>FakeMessanger</topic>
                        <topic>ChangedMessage</topic>
                    </topics>
                    <partitions>
                      <partition>Apart</partition>
                      <partition>Bpa?t*</partition>
                    </partitions>
                </publish>
                <subscribe>
                    <topics>
                        <topic>P*</topic>
                        <topic>*WrongMessage</topic>
                        <topic>FakeMessanger</topic>
                        <topic>ChangedMessage</topic>
                    </topics>
                    <partitions>
                      <partition>Apart</partition>
                      <partition>Bpa?t*</partition>
                    </partitions>
                    <data_tags>
                      <tag>
                        <name>aTagName1</name>
                        <value>aTagValue1</value>
                      </tag>
                    </data_tags>
                </subscribe>
                <relay>
                  <topics>
                        <topic>P*</topic>
                        <topic>*WrongMessage</topic>
                        <topic>FakeMessanger</topic>
                        <topic>ChangedMessage</topic>
                    </topics>
                    <partitions>
                      <partition>Apart</partition>
                      <partition>Bpa?t*</partition>
                    </partitions>
                    <data_tags>
                      <tag>
                        <name>aTagName1</name>
                        <value>aTagValue1</value>
                      </tag>
                    </data_tags>
                </relay>
            </deny_rule>

            <default>ALLOW</default>
        </grant>
    </permissions>
</dds>
