Difference between revisions of "Code Discussion 2009-06-29"
Jump to navigation
Jump to search
Line 15: | Line 15: | ||
**Table: role_grant | **Table: role_grant | ||
**Table: scope_def | **Table: scope_def | ||
*Policy change takes effect after escidoc-core restart | |||
==Filters== | ==Filters== |
Revision as of 12:02, 29 June 2009
Previous topic[edit]
Next topic[edit]
Authorization mechanisms[edit]
- XACML policy example
- Policy decision point
Implementation of existing policies[edit]
- in PgSql database aa schema
- Table: escidoc_role (role definitions)
- Table: escidoc_policies (policies in XACML for a role)
- Table: role_grant
- Table: scope_def
- Policy change takes effect after escidoc-core restart
Filters[edit]
- translate XACML rules into SQL Queries
- careful about what works and what does not work
Policy examples[edit]
Implementation of new actions[edit]
- other code discussion meeting
- implementation of new policies and actions
- PDP engine