This method registers a new protocol URL handler, so if a URL
for this protocol has to be parsed, the getPrincipal and getSubtree nodes
will know who can handle such URLs.
This method returns an adjusted ValidityPeriod, where the collection of
ValidityPeriods provided at construction time is adjusted against the
given ValidityPeriod.
This method determines the credential set that can be delegated to the
given
user, delegation depth distant from this SOA/AA out of the set of assumed
credentials.
This method determines the set of RARs that can be delegated to the
given
user, delegation depth distant from this SOA/AA out of the set of assumed
RARs.
This constructor builds an AllocationPolicy with the default
RuleComparator; this is a shortcut to AllocationPolicy(assignmentRules, null)
See that constructor for details of the meaning.
This method generates a response regarding the the request of the user
with the given set of credentials to perform the specified action on
the specified target.
This method makes a decision, and in addition to that can provide a set
of Obligations that the system must fulfil upon enforcement of the
decision.(The method name is changed from response() to authzDecision())
This method tells whether this interpreter can evaluate the expression,
which is only if there are only two Terms, and both are of type
Types.INTEGER_TYPE.
This method returns the string type of the result of evaluating the given
set of Terms, or null, if the expression cannot be evaluated by this
interpreter.
This method tells whether this interpreter can evaluate the expression,
which is only if there are only two Terms, and both are of type
Types.STRING_TYPE.
This is the method which administrators should change if they want to reverse the order of revocation checking
The values are: certFirst and crlFirst
The default setting is to get the certificate first for performance.
this is a message processor, which receives a WS-Trust security token request,
an XACML request context or a SAML authz request and returns an XACML request context,
an XACML response context or a SAML authz response respectively.
This is the default Role Assignment Rule Comparator, used to optimise the
delegation chain validation by applying the most relevant Role Assignment
Rules first.
This constructor builds the union of the array of DIT subtrees, with
additional object classes restriction, so even if the object class will
be allowed by a certain subtree, it still can be sieved away by this object
class specification.
The method builds a usual TermNode and then checks if an interpreter can
be found that
would agree to interpret the relevant terms (children nodes) and deliver a
definite result.
This method checks that there is only one child element in XML, and
that it is of type ArgNode or EnvironmentNode to ensure the semantic
correctness of XML policy.
This method ensures the children are Terms and that there are not more
than maxOperandCount
and not less than minOperandCount of them, as specified in the
constructor.
This method checks that all the roles listed have been declared in
the corresponding RoleHierarchyPolicyNode and constructs a
Credentials representing the union of all the roles in the list.
Generally, this method tests that both ValidityPeriods contain the given
ValidityPeriod (the condition that the intersection of sets contains the
given value).