How can I write ALFA policies which allow delegation of certain actions on certain resources? In XACML these are called Administrative policies.
(As described in http://docs.oasis-open.org/xacml/3.0/xacml-3.0-administration-v1-spec-en.html)
How can I write ALFA policies which allow delegation of certain actions on certain resources? In XACML these are called Administrative policies.
(As described in http://docs.oasis-open.org/xacml/3.0/xacml-3.0-administration-v1-spec-en.html)
Short answer: you cannot.
Because the ALFA language does not let you set a
PolicyIssuer
, you cannot write delegation policies.You could write standard policies in ALFA and then write a script that would insert the
PolicyIssuer
element.This is similar to the question asked here: How to use "issuer" tag in ALFA plugin?