Difference between revisions of "Code Discussion 2009-06-29"

From MPDLMediaWiki
Jump to navigation Jump to search
 
Line 31: Line 31:
*[http://www.escidoc.org/media/docs/escidoc-days-2009/escidoc-ws-aa.pdf AA eSciDoc Days presentation]
*[http://www.escidoc.org/media/docs/escidoc-days-2009/escidoc-ws-aa.pdf AA eSciDoc Days presentation]


[[Category:ESciDoc-Team|Code 2009-06-29]]
[[Category:Code_Discussion|Code 2009-06-29]]

Latest revision as of 12:40, 4 September 2009

Previous topic[edit]

Previous topic 2009-06-22

Next topic[edit]

Next topic 2009-07-06?

Authorization mechanisms[edit]

Implementation of existing policies[edit]

  • in PgSql database aa schema
    • Table: escidoc_role (role definitions)
    • Table: escidoc_policies (policies in XACML for a role)
    • Table: role_grant
    • Table: scope_def
  • Policy change takes effect after escidoc-core restart

Filters[edit]

  • translate XACML rules into SQL Queries
  • careful about what works and what does not work

Policy examples[edit]

Implementation of new actions[edit]

  • other code discussion meeting
  • implementation of new policies and actions
  • PDP engine

See also[edit]