user3128302
user3128302

Reputation: 21

XACML for dynamic authorization using time and date

Please, I would like to know how to write XACML policy for dynamic control. I want to control user permission to access attribute with time or date.

Upvotes: 1

Views: 175

Answers (1)

David Brossard
David Brossard

Reputation: 13834

You will need to be more specific in your question if you want us to help with the XACML policy.

Generally you can use the ALFA plugin for Eclipse to write an ALFA policy that will get automatically converted on the fly into a XACML 3.0 policy.

In your question, you say:

I want to control user permission to access attribute with time or date.

Your XACML policy could look like

policy example{
    target clause currentDate>"2014-06-01":date and currentTime>"07:00:00":time
    apply firstApplicable
    rule allowAccessManagers{
        target clause role=="manager"
        permit
    }

}

You can download the ALFA plugin here.

Upvotes: 0

Related Questions