Skip to content
GitLab
Projects
Groups
Snippets
Help
Loading...
Help
What's new
7
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
Open sidebar
authzforce
fiware
Commits
ee9c67a4
Commit
ee9c67a4
authored
Mar 15, 2018
by
cdanger
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
added XACML samples used in the doc
parent
70c1e54e
Changes
4
Hide whitespace changes
Inline
Side-by-side
Showing
4 changed files
with
167 additions
and
0 deletions
+167
-0
doc/xacml.samples/pdp.xml
doc/xacml.samples/pdp.xml
+9
-0
doc/xacml.samples/policy.xml
doc/xacml.samples/policy.xml
+72
-0
doc/xacml.samples/request_expect_deny.xml
doc/xacml.samples/request_expect_deny.xml
+43
-0
doc/xacml.samples/request_expect_permit.xml
doc/xacml.samples/request_expect_permit.xml
+43
-0
No files found.
doc/xacml.samples/pdp.xml
0 → 100644
View file @
ee9c67a4
<?xml version="1.0" encoding="UTF-8"?>
<pdp
xmlns:xsi=
"http://www.w3.org/2001/XMLSchema-instance"
xmlns=
"http://authzforce.github.io/core/xmlns/pdp/6.0"
version=
"6.0.0"
>
<rootPolicyProvider
id=
"rootPolicyProvider"
xsi:type=
"StaticRootPolicyProvider"
policyLocation=
"${PARENT_DIR}/policy.xml"
/>
<ioProcChain>
<requestPreproc>
urn:ow2:authzforce:feature:pdp:request-preproc:xacml-json:default-lax
</requestPreproc>
<resultPostproc>
urn:ow2:authzforce:feature:pdp:result-postproc:xacml-json:default
</resultPostproc>
</ioProcChain>
</pdp>
doc/xacml.samples/policy.xml
0 → 100644
View file @
ee9c67a4
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<PolicySet
xmlns=
"urn:oasis:names:tc:xacml:3.0:core:schema:wd-17"
PolicySetId=
"root"
Version=
"1.0"
PolicyCombiningAlgId=
"urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:deny-unless-permit"
>
<Description>
Sample PolicySet
</Description>
<Target
/>
<Policy
PolicyId=
"MissionManagementApp"
Version=
"1.0"
RuleCombiningAlgId=
"urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:deny-unless-permit"
>
<Description>
Policy for MissionManagementApp
</Description>
<Target>
<AnyOf>
<AllOf>
<Match
MatchId=
"urn:oasis:names:tc:xacml:1.0:function:string-equal"
>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
MissionManagementApp
</AttributeValue>
<AttributeDesignator
Category=
"urn:oasis:names:tc:xacml:3.0:attribute-category:resource"
AttributeId=
"urn:oasis:names:tc:xacml:1.0:resource:resource-id"
DataType=
"http://www.w3.org/2001/XMLSchema#string"
MustBePresent=
"true"
/>
</Match>
</AllOf>
</AnyOf>
</Target>
<Rule
RuleId=
"MissionManager_role_can_manage_team"
Effect=
"Permit"
>
<Description>
Only MissionManager role authorized to manage the mission team
</Description>
<Target>
<AnyOf>
<AllOf>
<Match
MatchId=
"urn:oasis:names:tc:xacml:1.0:function:string-equal"
>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
Team
</AttributeValue>
<AttributeDesignator
Category=
"urn:oasis:names:tc:xacml:3.0:attribute-category:resource"
AttributeId=
"urn:thales:xacml:2.0:resource:sub-resource-id"
DataType=
"http://www.w3.org/2001/XMLSchema#string"
MustBePresent=
"true"
/>
</Match>
</AllOf>
</AnyOf>
<AnyOf>
<AllOf>
<Match
MatchId=
"urn:oasis:names:tc:xacml:1.0:function:string-equal"
>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
manage
</AttributeValue>
<AttributeDesignator
Category=
"urn:oasis:names:tc:xacml:3.0:attribute-category:action"
AttributeId=
"urn:oasis:names:tc:xacml:1.0:action:action-id"
DataType=
"http://www.w3.org/2001/XMLSchema#string"
MustBePresent=
"true"
/>
</Match>
</AllOf>
</AnyOf>
</Target>
<Condition>
<Apply
FunctionId=
"urn:oasis:names:tc:xacml:3.0:function:any-of"
>
<Function
FunctionId=
"urn:oasis:names:tc:xacml:1.0:function:string-equal"
/>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
Manager
</AttributeValue>
<AttributeDesignator
AttributeId=
"urn:oasis:names:tc:xacml:2.0:subject:role"
DataType=
"http://www.w3.org/2001/XMLSchema#string"
MustBePresent=
"false"
Category=
"urn:oasis:names:tc:xacml:1.0:subject-category:access-subject"
/>
</Apply>
</Condition>
</Rule>
</Policy>
</PolicySet>
doc/xacml.samples/request_expect_deny.xml
0 → 100644
View file @
ee9c67a4
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<Request
xmlns=
"urn:oasis:names:tc:xacml:3.0:core:schema:wd-17"
CombinedDecision=
"false"
ReturnPolicyIdList=
"false"
>
<Attributes
Category=
"urn:oasis:names:tc:xacml:1.0:subject-category:access-subject"
>
<Attribute
AttributeId=
"urn:oasis:names:tc:xacml:1.0:subject:subject-id"
IncludeInResult=
"false"
>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
joe
</AttributeValue>
</Attribute>
<Attribute
AttributeId=
"urn:oasis:names:tc:xacml:2.0:subject:role"
IncludeInResult=
"false"
>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
Operator
</AttributeValue>
</Attribute>
</Attributes>
<Attributes
Category=
"urn:oasis:names:tc:xacml:3.0:attribute-category:resource"
>
<Attribute
AttributeId=
"urn:oasis:names:tc:xacml:1.0:resource:resource-id"
IncludeInResult=
"false"
>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
MissionManagementApp
</AttributeValue>
</Attribute>
<Attribute
AttributeId=
"urn:thales:xacml:2.0:resource:sub-resource-id"
IncludeInResult=
"false"
>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
Team
</AttributeValue>
</Attribute>
</Attributes>
<Attributes
Category=
"urn:oasis:names:tc:xacml:3.0:attribute-category:action"
>
<Attribute
AttributeId=
"urn:oasis:names:tc:xacml:1.0:action:action-id"
IncludeInResult=
"false"
>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
manage
</AttributeValue>
</Attribute>
</Attributes>
<Attributes
Category=
"urn:oasis:names:tc:xacml:3.0:attribute-category:environment"
/>
</Request>
doc/xacml.samples/request_expect_permit.xml
0 → 100644
View file @
ee9c67a4
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<Request
xmlns=
"urn:oasis:names:tc:xacml:3.0:core:schema:wd-17"
CombinedDecision=
"false"
ReturnPolicyIdList=
"false"
>
<Attributes
Category=
"urn:oasis:names:tc:xacml:1.0:subject-category:access-subject"
>
<Attribute
AttributeId=
"urn:oasis:names:tc:xacml:1.0:subject:subject-id"
IncludeInResult=
"false"
>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
joe
</AttributeValue>
</Attribute>
<Attribute
AttributeId=
"urn:oasis:names:tc:xacml:2.0:subject:role"
IncludeInResult=
"false"
>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
Manager
</AttributeValue>
</Attribute>
</Attributes>
<Attributes
Category=
"urn:oasis:names:tc:xacml:3.0:attribute-category:resource"
>
<Attribute
AttributeId=
"urn:oasis:names:tc:xacml:1.0:resource:resource-id"
IncludeInResult=
"false"
>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
MissionManagementApp
</AttributeValue>
</Attribute>
<Attribute
AttributeId=
"urn:thales:xacml:2.0:resource:sub-resource-id"
IncludeInResult=
"false"
>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
Team
</AttributeValue>
</Attribute>
</Attributes>
<Attributes
Category=
"urn:oasis:names:tc:xacml:3.0:attribute-category:action"
>
<Attribute
AttributeId=
"urn:oasis:names:tc:xacml:1.0:action:action-id"
IncludeInResult=
"false"
>
<AttributeValue
DataType=
"http://www.w3.org/2001/XMLSchema#string"
>
manage
</AttributeValue>
</Attribute>
</Attributes>
<Attributes
Category=
"urn:oasis:names:tc:xacml:3.0:attribute-category:environment"
/>
</Request>
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment