嗨,我打算使用wso2 balana进行外部授权。 我对此有疑问。 我怀疑的是,在使用策略文件检查后,pdp发送响应是否可以根据操作获取属性级别信息。 输出将如下所示
客户信息:名字:读取,编辑,删除姓氏:读取名称:读取,编辑
所以我需要在属性级别上使用不同的操作进行响应。 是否可以评估政策并获得上述回复?
hi i am planning to use wso2 balana for externalizing authorization. I have a doubt on this. my doubt is when pdp send response after checking with policy file is it possible to get attribute level informations based on actions. Output will look something like below
customer info: firstname: read, edit,delete lastname : read designation: read,edit
so i need a response on attribute level with different actions. is it possible to evaluate a policy and get a response as above?
最满意答案
对的,这是可能的。 您可以在XACML响应中发送任何信息作为建议和义务。 这解释了有关XACML 3.0的义务和建议的一些信息。 基本上,您可以使用它发送用户的属性。 如果您正在使用Balana,那么有一个示例会返回带有响应的建议。 您可以从这里找到样品详细信息。 如果我发现更多细节,会通知你。
Yes.. It is possible. You can send any information within XACML response as Advices and Obligations. This explains some info about Obligations and Advice with XACML 3.0. Basically you can send a user's attributes using it. If you are using Balana, There is sample that returns Advices with the response. You can find sample details from here. If i found more details, will let you know.
更多推荐
发布评论