soar_pl 0.0.2 → 0.0.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +4 -2
- data/lib/soar_pl/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: a60e02f51f15f83466d5aa2ec75dca9a858b99dd
|
|
4
|
+
data.tar.gz: 371a9f475d7b5b8a903185a4e37053c469d0d127
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 4062a881a1865fcf164864eb4fa73df635bbd87cf2d165f9d1ae17f10aedcd6c5384356c998e80d7e738c7f33d6f58e615a258b2eac2d1b6dcc636423885faa5
|
|
7
|
+
data.tar.gz: 215c8b4bfd84bd633309e67330d846bfe1e181adecc10c8c5ee145e24346eca3aff69a414fa27ce9141ebc0ee8830c1bef8e1c9b0654916c76d066c20dfd7a59
|
data/README.md
CHANGED
|
@@ -51,7 +51,7 @@ Optionally, require roles to be present for an entity that you identify with a s
|
|
|
51
51
|
|
|
52
52
|
@iut.requires_roles(['client', 'owner'])
|
|
53
53
|
|
|
54
|
-
If
|
|
54
|
+
If requiring roles, you must provide an IDM to retrieve the entity's roles, and the attributes for each role, from:
|
|
55
55
|
|
|
56
56
|
@iut.has_idm(@idm_instance)
|
|
57
57
|
|
|
@@ -67,7 +67,7 @@ The result is jsend of the form:
|
|
|
67
67
|
|
|
68
68
|
The result status will be 'fail' if something goes wrong, such as a validation failure. The status will be 'success' if the authorization took place, regardless of a true or false value for 'allowed'.
|
|
69
69
|
|
|
70
|
-
When building your rule set, you can use
|
|
70
|
+
When building your rule set, you can use your configuration as well as the parameters passed to the authorize method, and roles and attributes obtained from the IDM. You only have to override the apply_rule_set method as below. By the time apply_rule_set is called, you can rest assured that all required roles have been checked, if you specified an IDM. apply_rule_set must return a boolean indicator and a string message, e.g.:
|
|
71
71
|
|
|
72
72
|
require 'soar_pl'
|
|
73
73
|
|
|
@@ -79,6 +79,8 @@ When building your rule set, you can use both your configuration as well as the
|
|
|
79
79
|
end
|
|
80
80
|
end
|
|
81
81
|
|
|
82
|
+
IDM failures result in an Entity error being reported.
|
|
83
|
+
|
|
82
84
|
## Deploying
|
|
83
85
|
|
|
84
86
|
This authorization policy framework can be deployed in-process in any ruby application or application server. It was intended for the SOAR architecture and to be deployed on soar_sc service components.
|
data/lib/soar_pl/version.rb
CHANGED