You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2012/11/28 10:52:58 UTC

[jira] [Created] (CXF-4657) Add XACML functionality to CXF runtime

Colm O hEigeartaigh created CXF-4657:
----------------------------------------

             Summary: Add XACML functionality to CXF runtime
                 Key: CXF-4657
                 URL: https://issues.apache.org/jira/browse/CXF-4657
             Project: CXF
          Issue Type: Improvement
          Components: JAX-RS Security, WS-* Components
    Affects Versions: 2.7.0
            Reporter: Colm O hEigeartaigh
            Assignee: Colm O hEigeartaigh
             Fix For: 2.7.1



This task is to add XACML functionality to the CXF runtime, to enable a CXF JAX-WS or JAX-RS endpoint to act as a PEP (Policy Enforcement Point). A SAML Token is extracted from the SecurityContext, and an XACML request is created containing the User/Role/Action/etc. The user must subclass this abstract functionality to actually perform the request to the PDP. The response from the PDP is then enforced in the PEP.

This functionality will be added in a new rt/security module, where we can eventually move more of the common JAX-RS/JAX-WS security functionality from the rt/core module.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Resolved] (CXF-4657) Add XACML functionality to CXF runtime

Posted by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-4657?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh resolved CXF-4657.
--------------------------------------

    Resolution: Fixed
    
> Add XACML functionality to CXF runtime
> --------------------------------------
>
>                 Key: CXF-4657
>                 URL: https://issues.apache.org/jira/browse/CXF-4657
>             Project: CXF
>          Issue Type: Improvement
>          Components: JAX-RS Security, WS-* Components
>    Affects Versions: 2.7.0
>            Reporter: Colm O hEigeartaigh
>            Assignee: Colm O hEigeartaigh
>             Fix For: 2.7.1
>
>
> This task is to add XACML functionality to the CXF runtime, to enable a CXF JAX-WS or JAX-RS endpoint to act as a PEP (Policy Enforcement Point). A SAML Token is extracted from the SecurityContext, and an XACML request is created containing the User/Role/Action/etc. The user must subclass this abstract functionality to actually perform the request to the PDP. The response from the PDP is then enforced in the PEP.
> This functionality will be added in a new rt/security module, where we can eventually move more of the common JAX-RS/JAX-WS security functionality from the rt/core module.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira