Reputation: 21
Please, I would like to know how to write XACML policy for dynamic control. I want to control user permission to access attribute with time or date.
Upvotes: 1
Views: 175
Reputation: 13834
You will need to be more specific in your question if you want us to help with the XACML policy.
Generally you can use the ALFA plugin for Eclipse to write an ALFA policy that will get automatically converted on the fly into a XACML 3.0 policy.
In your question, you say:
I want to control user permission to access attribute with time or date.
Your XACML policy could look like
policy example{
target clause currentDate>"2014-06-01":date and currentTime>"07:00:00":time
apply firstApplicable
rule allowAccessManagers{
target clause role=="manager"
permit
}
}
You can download the ALFA plugin here.
Upvotes: 0