com.ibm.tscc.rtss.authz.api
Interface IObligationHandler
- public interface IObligationHandler
Defines a mechanism for an obligation returned from policy to be automatically handled by RTSS, rather than being returned to the PEP.
Since:
7.1.0.4
Method Summary
Modifier and Type | Method and Description |
---|---|
|
handleObligation(java.lang.String obligationId,java.util.Map<java.lang.String,java.lang.Object> attributes,RequestContext context,boolean responseDecision)
Invoked by RTSS when a authorization decision contains an obligation that is mapped to this
handler in the security-services.xmi file.
|
|
shutdown()
Called on system shutdown or re-initialization of Tivoli Runtime Security Services configuration.
|
|
startup(java.util.Properties props)
Called on initialization.
|
Method Detail
startup
- void startup(java.util.Properties props)
Called on initialization. The Properties passed are from
the Tivoli Runtime Security Services configuration file.
Parameters:
props
- properties read from the configuration file. shutdown
- void shutdown()
Called on system shutdown or re-initialization of Tivoli Runtime Security Services configuration. Enables
the plugin to clean up.
handleObligation
- boolean handleObligation(java.lang.String obligationId,
- java.util.Map<java.lang.String,java.lang.Object> attributes,
- RequestContext context,
- boolean responseDecision)
- throws ObligationHandlerException
Invoked by RTSS when a authorization decision contains an obligation that is mapped to this
handler in the security-services.xmi file.
Parameters:
obligationId
- The ID of the obligation. attributes
- The attributes defined in the obligation. context
- The current request context. responseDecision
- The current response decision. This is set to true if the policy evaluation had returned permit, false if the policy evaluation had returned deny. Returns:
True if the obligation was handled, false if not. If true is returned then this obligation
is removed from the response and is not returned to the PEP. If false is returned then this obligation
is not removed from the response.
Throws:
ObligationHandlerException
- If this method throws an exception then an INDETERMINATE decision is sent to the PEP.
In the case, when the handleObligation method is called for an entitlement,
then on an exception, this particular entitlement is removed from the response.