Code Discussion 2009-06-29

Previous topic

Previous topic 2009-06-22

Next topic

Next topic 2009-07-06?

Authorization mechanisms

• XACML policy example
• Policy decision point

Implementation of existing policies

• in PgSql database aa schema
  • Table: escidoc_role (role definitions)
  • Table: escidoc_policies (policies in XACML for a role)
  • Table: role_grant
  • Table: scope_def
• Policy change takes effect after escidoc-core restart

Filters

• translate XACML rules into SQL Queries
• careful about what works and what does not work

Implementation of new actions

• other code discussion meeting
• implementation of new policies and actions
• PDP engine

See also

• AA eSciDoc Days presentation

eXtensible Access Control Markup Language

Structured Query Language