Anthony Galiamov

View Original

Attribute-based Authorization - ACL / POP

Overview

The WebSEAL authorization service makes decisions on requests to protected objects based on two types of policies:

  • Access control list (ACL) policies

  • Protected object polices (POP)

The purpose of a POP is to impose additional conditions on the operation permitted by the ACL policy. In ISAM 9.0.7 an additional attribute, the trigger_attr_eas was introduced which allowed additional custom values to be set.

See this content in the original post

Additional Information/Links

Here are some useful links you can checkout for additional information.