Java PolicyRepository類代碼示例

import org.herasaf.xacml.core.api.PolicyRepository; //導入依賴的package包/類
private void undeployAllPolicies(PDP pdp) {
    final PolicyRepository repo = (PolicyRepository) pdp
            .getPolicyRepository();
    final List<Evaluatable> policies = new LinkedList<>(
            repo.getDeployment());
    for (final Evaluatable policy : policies) {
        repo.undeploy(policy.getId());
    }
}
 

import org.herasaf.xacml.core.api.PolicyRepository; //導入依賴的package包/類
/**
 * Access control:
 * Check the target elements of the policySetOrPolicy with HERAS against the request.	 * 
 *  
 * @param policySetOrPolicy - a list of PolicyType or PolicySetType objects from PPL
 * @param request - the XACML request
 * @return the decision (PERMIT, DENY, INDETERMINATE, NOT_APPLICABLE)
 * @throws WritingException
 * @throws SyntaxException
 * @throws com.sap.research.primelife.exceptions.SyntaxException
 * @throws JAXBException
 */
public DecisionType checkAccess(List<Object> policySetOrPolicy, RequestType request) 
	throws WritingException, SyntaxException, com.sap.research.primelife.exceptions.SyntaxException, JAXBException{
	
	// we evaluate request against policy repository associated with the PII
	SimplePDPFactory.useDefaultInitializers();
	PDP simplePDP = SimplePDPFactory.getSimplePDP();
	PolicyRepository repo = simplePDP.getPolicyRepository();
	// initialize policy repository
	for (Object obj : policySetOrPolicy) {
		Evaluatable evaluatable = null;
		
		if (obj instanceof PolicySetType) {
			evaluatable = ConverterFunctions.convertToHerasPolicySet(
					(PolicySetType) obj);
		}
		else if (obj instanceof PolicyType) {
			evaluatable = ConverterFunctions.convertToHerasPolicy(
					(PolicyType) obj);
		}
		else if (obj instanceof eu.primelife.ppl.policy.xacml.impl.PolicyType) {
			evaluatable = ConverterFunctions.convertToHerasPolicy((eu.primelife.ppl.policy.xacml.impl.PolicyType) obj);
		}
		repo.deploy(evaluatable);
	}
	ResponseCtx responseCtx = simplePDP.evaluate(new RequestCtx(request));
	DecisionType decision =	responseCtx.getResponse().getResults().get(0).getDecision();
	return decision;
}
 

import org.herasaf.xacml.core.api.PolicyRepository; //導入依賴的package包/類
/**
 * Enforces policy given in <code>preferencePath</code> against request
 * stored in <code>request</code>.
 *
 * @param preferencePath	preference policy path (in resources)
 * @param domain			data controller id
 * @param resource			resource attribute type
 * @return	policy enforcement result
 * @throws SyntaxException
 * @throws WritingException
 * @throws org.herasaf.xacml.core.SyntaxException
 * @throws JAXBException
 */
private DecisionType enforce(String preferencePath, String domain,
		String resource) throws SyntaxException, WritingException,
		org.herasaf.xacml.core.SyntaxException, JAXBException {
	SimplePDPFactory.useDefaultInitializers();
	PDP simplePDP = SimplePDPFactory.getSimplePDP();
	PolicyRepository repo = simplePDP.getPolicyRepository();
	PolicyType policy = (PolicyType) unmarshallerPrime.unmarshal(
			getClass().getResourceAsStream(preferencePath));
	repo.deploy(ConverterFunctions.convertToHerasPolicy(policy));
	RequestCtx request = createRequestContext(domain, resource);
	ResponseCtx responseCtx = simplePDP.evaluate(request);
	List<ResultType> results = responseCtx.getResponse().getResults();
	return results.get(0).getDecision();
}
 

import org.herasaf.xacml.core.api.PolicyRepository; //導入依賴的package包/類
/**
 * Undeploy policies.
 * 
 * @param pdp
 *            the pdp
 * @param policies
 *            the policies
 */
public void undeployPolicies(PDP pdp, List<Evaluatable> policies) {
	PolicyRepository repo = (PolicyRepository) pdp.getPolicyRepository();
	for (Evaluatable policy : policies) {
		repo.undeploy(policy.getId());
	}
}
 

import org.herasaf.xacml.core.api.PolicyRepository; //導入依賴的package包/類
/**
 * Undeploy multiple policies on the policy repository.
 * 
 * @param pdp
 *            the pdp
 * @param policy
 *            the policy
 */
public void undeployPolicy(PDP pdp, Evaluatable policy) {
	PolicyRepository repo = (PolicyRepository) pdp.getPolicyRepository();
	repo.undeploy(policy.getId());

}
 

import org.herasaf.xacml.core.api.PolicyRepository; //導入依賴的package包/類
/**
 * Undeploy multiple policies on the policy repository.
 * 
 * @param pdp
 *            the pdp
 * @param policyIds
 *            the policy ids
 */
public void undeployPoliciesById(PDP pdp, List<EvaluatableID> policyIds) {
	PolicyRepository repo = (PolicyRepository) pdp.getPolicyRepository();
	repo.undeploy(policyIds);
}