org.adroitlogic.ultraesb.api.mediation
Interface XACMLSupport

public interface XACMLSupport

XACML mediation support

Since:

1.7.0

Method Summary

boolean	isPermitted(java.lang.String xacmlBeanId, java.util.Map custom) Is message allowed permission by the XACML processor bean selected.
boolean	isPermitted(java.lang.String xacmlBeanId, Message msg) Is message allowed permission by the XACML processor bean selected.
boolean	isPermitted(java.lang.String xacmlBeanId, java.lang.String issuer, java.util.Map custom, Message msg) Is message allowed permission by the XACML processor bean selected.

Method Detail

isPermitted

boolean isPermitted(java.lang.String xacmlBeanId,
                    Message msg)

Is message allowed permission by the XACML processor bean selected. Automatically maps the following HTTP related transport properties to the specified attribute names action-id -> msg.getMessageProperty(HttpConstants.METHOD) subject-id -> msg.getMessageProperty(HttpConstants.USERNAME) role -> msg.getMessageProperty(HttpConstants.USERROLES) as a String[] client-dn -> msg.getMessageProperty(HttpConstants.SSL_CLIENT_DN) resource-id -> msg.getMessageProperty(HttpConstants.SERVICE_URL)

Parameters:

xacmlBeanId - the bean Id of the XACML Processor

msg - the current message

Returns:

true if message is allowed permission

isPermitted

boolean isPermitted(java.lang.String xacmlBeanId,
                    java.util.Map custom)

Is message allowed permission by the XACML processor bean selected.

Parameters:

xacmlBeanId - the bean Id of the XACML Processor

custom - a Map map of attribute values keyed as per the XACML Processor bean configuration

Returns:

true if message is allowed permission

isPermitted

boolean isPermitted(java.lang.String xacmlBeanId,
                    java.lang.String issuer,
                    java.util.Map custom,
                    Message msg)

Is message allowed permission by the XACML processor bean selected.

Parameters:

xacmlBeanId - the bean Id of the XACML Processor

issuer - an optional issuer field, or null

custom - a Map map of attribute values keyed as per the XACML Processor bean configuration

msg - the current message to extract attribute values - if message properties are keyed as per the XACML Processor bean configuration

Returns:

true if message is allowed permission