Example Web PEP

Web Policy Enforcement Point

Use case example

We want to define a policy to restrict access to the Soffid console user's page (MainMenu > Administration > Resources > Users).

The users who are assigned to the SOFFID_RRHH role (from this point forward: end-users) will have limitations to perform some actions on the Soffid console users page:

The end-users only be able to query the information about the users who belong to the same primary group that them.
The end-users only be able to update the users with internal user type.
The end-users could not delete any user record.

XACML Editor

Policy set

&&TODO&& Definir y revisar

Policy

 

Rules

Deny accessto a user to a specific resource

Permit access to a specific user

Permit access to other users

Log

Download example

XML

PolicySet
You TestWebPEPcan 2: MATCHES
> Policy WebPolicy2 1: MATCHES
> - Rule Deny access to bob todownload a specificXML resource:file DENYwith >the -example:&&TODO&&
Rule
Configure PermitPEP
access

to
 
admin: NOT APPLICABLE
> - Rule Permit access to other users: PERMIT
> Decision: DENY
Decision: DENY