context IEXUAAssertionSpec
inv: self.attributeStatement->size() > 0 and
self.attributeStatement->forAll(ast : AttributeStatementType | 
	ast.attribute->size() > 0 and 
	ast.attribute->exists(at : AttributeType | 
		not(at.name.oclIsUndefined()) and 
		at.name = 'urn:oasis:names:tc:xacml:2.0:subject:role' and 
		at.attributeValue->size()>0 and
		at.attributeValue->forAll(av : AttributeValueType | 
		not(av.role.oclIsUndefined()) and
		not(av.role.code.oclIsUndefined()) and
		not(av.role.codeSystem.oclIsUndefined()) and
		av.role.codeSystem = '1.2.372.980010.3.4' and
		av.matchesCodeToValueSet(av.role.codeSystem, av.role.code)
		)
	)
)