org.wso2.balana.combine.xacml3

Class PermitUnlessDenyRuleAlg

java.lang.Object

org.wso2.balana.combine.CombiningAlgorithm

org.wso2.balana.combine.RuleCombiningAlgorithm

org.wso2.balana.combine.xacml3.PermitUnlessDenyRuleAlg

public class PermitUnlessDenyRuleAlg
extends RuleCombiningAlgorithm

This is the standard Deny unless permit rule combining algorithm. This algorithm is intended for those cases where a deny decision should have priority over a permit decision, and an "Indeterminate" or "NotApplicable" must never be the result. It is particularly useful at the top level in a policy structure to ensure that a PDP will always return a definite "Permit" or "Deny" result.

Field Summary

Fields

Modifier and Type	Field and Description
static String	algId The standard URI used to identify this algorithm

Constructor Summary

Constructors

Constructor and Description
PermitUnlessDenyRuleAlg() Standard constructor.
PermitUnlessDenyRuleAlg(URI identifier) Constructor that takes the algorithm's identifier.

Method Summary

Modifier and Type	Method and Description
AbstractResult	combine(EvaluationCtx context, List parameters, List ruleElements) Combines the rules based on the context to produce some unified result.

Methods inherited from class org.wso2.balana.combine.CombiningAlgorithm

getIdentifier

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

algId

public static final String algId

The standard URI used to identify this algorithm

See Also:

Constant Field Values

Constructor Detail

PermitUnlessDenyRuleAlg

public PermitUnlessDenyRuleAlg()

Standard constructor.

PermitUnlessDenyRuleAlg

public PermitUnlessDenyRuleAlg(URI identifier)

Constructor that takes the algorithm's identifier.

Parameters:

identifier - the algorithm's identifier

Method Detail

combine

public AbstractResult combine(EvaluationCtx context,
                              List parameters,
                              List ruleElements)

Description copied from class: RuleCombiningAlgorithm

Combines the rules based on the context to produce some unified result. This is the one function of a combining algorithm.

Specified by:

combine in class RuleCombiningAlgorithm

Parameters:

context - the representation of the request

parameters - a (possibly empty) non-null List of CombinerParameters

ruleElements - a List of CombinerElements

Returns:

a single unified result based on the combining logic