How to define a administrative policy in ALFA for delegation?

64 views Asked by At

How can I write ALFA policies which allow delegation of certain actions on certain resources? In XACML these are called Administrative policies.

(As described in http://docs.oasis-open.org/xacml/3.0/xacml-3.0-administration-v1-spec-en.html)

1

There are 1 answers

1
David Brossard On

Short answer: you cannot.

Because the ALFA language does not let you set a PolicyIssuer, you cannot write delegation policies.

You could write standard policies in ALFA and then write a script that would insert the PolicyIssuer element.

This is similar to the question asked here: How to use "issuer" tag in ALFA plugin?