attribute cardinality constraint