Example Web PEP

Web Policy Enforcement Point

Use case example

We want to define a policy to restrict access to some pages of the Soffid console user's page (MainMenu > Administration > Resources > Users).console.

The users who are assigned to the SOFFID_RRHH role (from this point forward: end-users) will have limitations to performaccess to some actions on the Soffid console users page:pages:

1. The end-users only be able to query the information about the users who belong to the same"enterprise" group as primary groupgroup, thatcould them.not
   The end-users only be ableaccess to update the usersgroups withpage.
internal user type.

2. The end-users could not deleteaccess anyto userrole record.
   page.
3. En other cases permit access.

XACML Editor

Policy set

First of all, we define a policy set. We need to define the subject, in that case users with SOFFID_RRHH role assigned.

 

&&TODO&& Definir y revisar

Policy

 

Rules

Deny accessto a user to a specific resource

Permit access to a specific user

Permit access to other users

Download XML

You can download a XML file with the example:&&TODO&& policy-TestWebPEP.xml

Configure PEP