[
https://issues.apache.org/jira/browse/CXF-4657?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh resolved CXF-4657.
--------------------------------------
Resolution: Fixed
> Add XACML functionality to CXF runtime
> --------------------------------------
>
> Key: CXF-4657
> URL: https://issues.apache.org/jira/browse/CXF-4657
> Project: CXF
> Issue Type: Improvement
> Components: JAX-RS Security, WS-* Components
> Affects Versions: 2.7.0
> Reporter: Colm O hEigeartaigh
> Assignee: Colm O hEigeartaigh
> Fix For: 2.7.1
>
>
> This task is to add XACML functionality to the CXF runtime, to enable a CXF
> JAX-WS or JAX-RS endpoint to act as a PEP (Policy Enforcement Point). A SAML
> Token is extracted from the SecurityContext, and an XACML request is created
> containing the User/Role/Action/etc. The user must subclass this abstract
> functionality to actually perform the request to the PDP. The response from
> the PDP is then enforced in the PEP.
> This functionality will be added in a new rt/security module, where we can
> eventually move more of the common JAX-RS/JAX-WS security functionality from
> the rt/core module.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
