Privacy actions identify the data to process and define the type of processing to perform on it. Each action is defined in its own section. An action's name must be unique among all section names. Each action can be used by any number of rules.
Buffered actions
When privacy actions are executed, the resulting changes are buffered. [Rule1]
is tested first, and if it evaluates to true, its action is buffered for later
execution. [Rule2], [Rule3], and all subsequent rules are tested,
and their actions are buffered in the order of evaluation as necessary. Each subsequent action is
taken on the data before it has been changed; it does not apply changes to data made by previous
actions.
There is one exception:
Note: For
ReqSet, ReqAppend, and ReqDelete
actions, which make changes to the request data, the Privacy session agent examines buffered changes
made by previous ReqSet, ReqAppend, and ReqDelete
actions, as well as the existing data. For example, if two consecutive actions set a value for the
request variable Foo in the [appdata] section of the request, the
second action overrides the first. However, these actions cannot see any changes made by previous
block or encrypt actions.