Package de.fzj.unicore.uas.security.util

Interface Summary
AttributeHandlingCallback Allows dealing with additional authorisation attributes by extending the list of attributes stored in the Client extending XACML callouts By adding objects implementing this interface to the RequestBuilder, XACML requests can have additional attributes.
AttributeSourcesChain.CombiningPolicy defines how attributes should be combined
 

Class Summary
AttributeSourceConfigurator Utility class used to configure attribute source
AttributeSourceFactory Creates the main attribute source chain and configures it.
AttributeSourcesChain IAttributeSource implementation that combines the results from a chain of attribute sources using a configurable combining policy: FIRST_APPLICABLE: the first source returning any result is used FIRST_ACCESSIBLE: the first accessible (i.e. not throwing an exception) source is used MERGE_LAST_OVERRIDES (default): all results are combined, so that the later attribute sources in the chain can override earlier ones MERGE : all results are combined, and attributes of the same name are merged
AttributeSourcesChain.FirstAccessible first accessible: the answer from the first accessible attribute source is used.
AttributeSourcesChain.FirstApplicable first applicable: only the first map of attributes is used
AttributeSourcesChain.Merge merge: attributes with the same key are combined
AttributeSourcesChain.MergeLastOverrides merge_last_overrides: new attributes overwrite existing ones
AuthZAttributeStore Helper class for storing authorization information for use by plain web services and non-UAS WSRF services This uses thread-local storage of Client, authz map, security tokens
KeystoreUtil  
RequestBuilder helper to build XACML requests
ResourceDescriptor Descriptor for a resource.
RuleBuilder helper to generate XACML rules using a nice, "fluent" API, based on the SUN XACML 1.0 implementation,
 



Copyright © 2006-2010 Research Center Juelich. All Rights Reserved.