Thursday, March 31, 2016

Identity Patterns with the WSO2 Identity Server
Render menu items in a web app based on the logged-in user’s fine-grained permissions

Problem:
  • When a business user logs into a web app, the menu items in the web app should be rendered dynamically based on the user’s permissions. 
  • There can be a case if the same user logs at 9 AM and then again at 9 PM could see different menu items as the permission can also be time sensitive. 
  • There can be a case if the same user logs in from China and then again from Canada could see different menu items as the permission can also be location sensitive.
Solution:
  • Deploy WSO2 Identity Server as a XACML PDP (Policy Decision Point). 
  • Define XACML policies via the XACML PAP (Policy Administration Point) of the WSO2 Identity Server. 
  • When a user logs into the web app, the web app will talk to the WSO2 Identity Server’s XACML PDP endpoint with a XACML request using XACML multiple decision profile and XACML multiple resource profile. 
  • After evaluating the XACML policies against the provided request, the WSO2 Identity Server returns back the XACML response, which includes the level permissions the user has on each resource under the parent resource specified in the initial XACML request. Each menu item is represented as a resource in the XACML policy. 
  • The web app caches the decision to avoid further calls to the XACML PDP. 
  • Whenever some event happens at the XACML PDP side, which requires expiring the cache, the WSO2 Identity Server will notify a registered endpoint of the web app. 
  • Products: WSO2 Identity Server 4.0.0+ 

2 comments:

Benny said...

Actually the actual bezel is made of ceramic also it utilizes rolex replica uk new software the actual Liquidmetal technologies in order to emphasize the actual replica watches sale size. This particular brand new technologies can make the actual numbers take away as well as is ideal for legibility. The actual replica watches sale procedure helps to ensure that the actual bezel doesn't diminish with time. The case measures a cartier replica sale big forty-four. 25mm. The actual chronograph pushers will also be rolex replica sale from dark ceramic as well as contain the variation associated with operating individually through one another, that protect the actual system through rolex replica broken through misusage. Finishing the actual view is really a dark nylon straps along with tag heuer replica uk sewing about the bottom. Incredibly, this particular watch just weighs in at an overall total associated with 91 gr, causeing this to be a hublot replica option with regard to every day put on. In addition, the actual ceramic situation entire body as well as sapphire very get this to view practically the begining evidence. The Omega replica sale after match and it is produced from dark ceramic. The actual hr guns tend to be baton formed indices.

dong dong23 said...

longchamp outlet
fitflops sandals
reebok classics
cheap ray ban sunglasses
polo ralph lauren
christian louboutin heels
adidas outlet store
adidas yeezy 350 boost
michael kors handbags
reebok sneakers
2017.5.6chenlixiang