Specifies restrictions and permissions for various evaluators, especially for scripting expressions. The permission profile configuration is a separate container with its own identifier as it is expected that the same setting will be applied to many evaluators and/or scripting languages. And the definition of a profile can be quite long and extensive.

Item Summary
Name	Type	Multiplicity	Description
identifier	property string	[1,1]	Profile identifier.
description	property string	[0,1]	Free-form description (comment).
decision	property AuthorizationDecisionType	[1,1]	Default decision for the profile.
package	container ExpressionPermissionPackageProfileType	[0,-1]	Detailed specification for access to a class.
class	container ExpressionPermissionClassProfileType	[0,-1]	Detailed specification for access to a class.

Items
- identifier
  
  Flags: RAM,runtime
  
  Multiplicity: [1,1]
  
  Profile identifier. Usually short string, essentialy a simple profile name. Custom profiles should consider using URIs instead of simple names to avoid conflicts with built-in profiles that may be provided in later versions.
- description
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
  
  Free-form description (comment).
- decision
  
  Flags: RAM,runtime,AVals:2
  
  Multiplicity: [1,1]
  
  Default decision for the profile. I.e. decision of those aspects of the profile (e.g. classes, permissions) that are not explicitly enumerated.
- package
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Detailed specification for access to a class.
- class
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Detailed specification for access to a class.