Old Release

This documentation covers an old version of Fedora. Looking for another version? See all documentation.

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Next »

Overview

XACML authorization module

Design documents

Proposed node types / CND

XACML policy objects would be created with primaryType=nt:file similar to a fedora:datastream and would store the contents of the policy in a jcr:content node.

 

<authz = 'http://fedora.info/definitions/v4/authorization#'>

[authz:xacmlAssignable] mixin
 - authz:policy (REFERENCE)

[authz:xacmlPolicy] > fedora:datastream mixin

 

In order to enable XACML authorization repository-wide the fedora:resource nodetype would be updated to include the authz:xacmlAssignable mixing:

[fedora:resource] > fedora:relations, mix:created, mix:lastModified, mix:lockable, mix:referenceable, dc:describable, authz:xacmlAssignable mixin
  • No labels