Modifier and Type | Interface and Description |
---|---|
interface |
PolicyLocator
Interface representing a locator for a XACML Policy
|
Modifier and Type | Class and Description |
---|---|
class |
AbstractJBossPolicyLocator
Base Class for Policy Locators
|
class |
AttributeLocator
An attribute finder module
Usage:
Remember, when a policy defines an attribute and the request does not contain
it, then the PDP will ask the AttributeLocator for a value.
|
class |
JBossPolicyLocator
Policy Locator for plain XACML Policy instances
|
class |
JBossPolicySetLocator
Locator for a PolicySet
|
class |
JBossRBACPolicySetLocator
A Policy Set Locator that follows the XACML RBAC Profile
|
class |
ResourceLocator
Resource Finder Module
The following methods need to be overridden in your locator
|
Modifier and Type | Class and Description |
---|---|
class |
DatabaseActionAttributeLocator
Locates an attribute about an Action from the DB
An example of the Locator configuration is here:
<ns:Locator Name="org.jboss.security.xacml.locators.attrib.DatabaseActionAttributeLocator">
<ns:Option Name="DATABASE_FILE_NAME">data_stores/db.properties</ns:Option> <ns:Option Name="sql">SELECT account_status FROM resource where owner_id=?;</ns:Option> <ns:Option Name="attributeSupportedId">urn:xacml:2.0:interop:example:resource:account-status</ns:Option> <ns:Option Name="preparedStatementValue">urn:xacml:2.0:interop:example:resource:owner-id</ns:Option> <ns:Option Name="valueDataType">http://www.w3.org/2001/XMLSchema#string</ns:Option> <ns:Option Name="columnName">account_status</ns:Option> </ns:Locator> |
class |
DatabaseAttributeLocator
An attribute locator that gets the attributes from the DB
|
class |
DatabaseEnvAttributeLocator
Locates an attribute about Environment from the DB
An example of the Locator configuration is here:
<ns:Locator Name="org.jboss.security.xacml.locators.attrib.DatabaseEnvAttributeLocator">
<ns:Option Name="DATABASE_FILE_NAME">data_stores/db.properties</ns:Option> <ns:Option Name="sql">SELECT account_status FROM resource where owner_id=?;</ns:Option> <ns:Option Name="attributeSupportedId">urn:xacml:2.0:interop:example:resource:account-status</ns:Option> <ns:Option Name="preparedStatementValue">urn:xacml:2.0:interop:example:resource:owner-id</ns:Option> <ns:Option Name="valueDataType">http://www.w3.org/2001/XMLSchema#string</ns:Option> <ns:Option Name="columnName">account_status</ns:Option> </ns:Locator> |
class |
DatabaseResourceAttributeLocator
Locates an attribute about the resource from the DB
An example of the Locator configuration is here:
<ns:Locator Name="org.jboss.security.xacml.locators.attrib.DatabaseResourceAttributeLocator">
<ns:Option Name="DATABASE_FILE_NAME">data_stores/db.properties</ns:Option> <ns:Option Name="sql">SELECT account_status FROM resource where owner_id=?;</ns:Option> <ns:Option Name="attributeSupportedId">urn:xacml:2.0:interop:example:resource:account-status</ns:Option> <ns:Option Name="preparedStatementValue">urn:xacml:2.0:interop:example:resource:owner-id</ns:Option> <ns:Option Name="valueDataType">http://www.w3.org/2001/XMLSchema#string</ns:Option> <ns:Option Name="columnName">account_status</ns:Option> </ns:Locator> |
class |
DatabaseSubjectAttributeLocator
Locates an attribute about the subject from the DB
An example of the Locator configuration is here:
<ns:Locator Name="org.jboss.security.xacml.locators.attrib.DatabaseSubjectAttributeLocator">
<ns:Option Name="DATABASE_FILE_NAME">data_stores/db.properties</ns:Option> <ns:Option Name="sql">SELECT account_status FROM resource where owner_id=?;</ns:Option> <ns:Option Name="attributeSupportedId">urn:xacml:2.0:interop:example:resource:account-status</ns:Option> <ns:Option Name="preparedStatementValue">urn:xacml:2.0:interop:example:resource:owner-id</ns:Option> <ns:Option Name="valueDataType">http://www.w3.org/2001/XMLSchema#string</ns:Option> <ns:Option Name="columnName">account_status</ns:Option> </ns:Locator> |
class |
FileSystemAttributeLocator
File System based attribute locator.
|
class |
LDAPActionAttributeLocator
LDAP Attribute Locator to obtain the action attribute
|
class |
LDAPAttributeLocator
An attribute locator getting attribute values from an LDAP
Configuration:
url - The LDAP server URL to connect to.
factory - The JNDI factory that is JDK specific such as "com.sun.jndi.ldap.LdapCtxFactory" which is the default. username - The username to connect to the LDAP server. |
class |
LDAPEnvAttributeLocator
LDAP Attribute Locator that will get an environment attribute
|
class |
LDAPResourceAttributeLocator
Locates an attribute about the resource from the LDAP
|
class |
LDAPSubjectAttributeLocator
Locates an attribute about the subject from the LDAP
|
class |
StorageAttributeLocator
Common base class for attribute locators using external storage
All subclasses have to override and implement the
AttributeFinderModule.findAttribute(URI, URI, URI, URI, EvaluationCtx, int) method |
Modifier and Type | Class and Description |
---|---|
class |
CacheLocator
Base Class for Cache Locators
|
class |
DecisionCacheLocator
A Cache that stores decisions made on requests.
|
Modifier and Type | Class and Description |
---|---|
class |
JBossLDAPPolicyLocator
A PolicyLocator that searches for XACML policies and policy sets stored in an attribute of LDAP entries
The attribute contains the XACML policy as if the xml would be converted to a String.
|
Copyright © 2023 JBoss by Red Hat. All rights reserved.