Combining algorithms
С комбинационными алгоритмами можно познакомиться в стандарте
XACML
Из него на данный момент реализовано 4:
PERMIT_UNLESS_DENY
|
permit |
deny |
not_applicable |
indeterminate |
permit |
permit |
deny |
permit |
permit |
deny |
deny |
deny |
deny |
deny |
not_applicable |
permit |
deny |
permit |
permit |
indeterminate |
permit |
deny |
permit |
permit |
DENY_UNLESS_PERMIT
|
permit |
deny |
not_applicable |
indeterminate |
permit |
permit |
permit |
permit |
permit |
deny |
permit |
deny |
deny |
deny |
not_applicable |
permit |
deny |
deny |
deny |
indeterminate |
permit |
deny |
deny |
deny |
PERMIT_OVERRIDES
|
permit |
deny |
not_applicable |
indeterminate |
permit |
permit |
permit |
permit |
permit |
deny |
permit |
deny |
deny |
indeterminate |
not_applicable |
permit |
deny |
not_applicable |
indeterminate |
indeterminate |
permit |
indeterminate |
indeterminate |
indeterminate |
DENY_OVERRIDES
|
permit |
deny |
not_applicable |
indeterminate |
permit |
permit |
deny |
permit |
indeterminate |
deny |
deny |
deny |
deny |
deny |
not_applicable |
permit |
deny |
not_applicable |
indeterminate |
indeterminate |
indeterminate |
deny |
indeterminate |
indeterminate |
Оглавление
- Quick start
- Project architecture
- Authentication
- Rules
- Combining algorithms