Changeset 6642

Timestamp:

25/02/10 08:19:18 (11 years ago)

Author:

pjkersha

Message:

 

File:

• TI12-security/trunk/NDGSecurity/python/ndg_security_common/ndg/security/common/authz/xacml/policy.py (modified) (3 diffs)

TI12-security/trunk/NDGSecurity/python/ndg_security_common/ndg/security/common/authz/xacml/policy.py

@@ -43 +43 @@
     TARGET_LOCALNAME = "Target"
     
+    # Plan to support permit overrides in a future release
+    RULE_COMBINING_ALG_IDS = (
+#    "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides",
+    "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides",
+    )
     __slots__ = (
         '__policyId',
@@ -51 +56 @@
         '__target',
         '__attr',
-        '__obligations',
-        '__policyFilePath',
+        '__obligations'
     )
     
-    def __init__(self, policyFilePath=None):
+    def __init__(self):
         super(Policy, self).__init__()
-        self.__policyFilePath = policyFilePath
+        self.__policyId = None
+        self.__version = None
+        self.__ruleCombiningAlgId = None
         self.__description = None
         self.__target = None
@@ -67 +73 @@
         
         self.__obligations = TypedList(Obligation)
+
+    def _getPolicyId(self):
+        return self.__policyId
+
+    def _setPolicyId(self, value):
+        if not isinstance(value, basestring):
+            raise TypeError('Expecting string type for "policyId" '
+                            'attribute; got %r' % type(value))
+            
+        self.__policyId = value
+
+    policyId = property(_getPolicyId, _setPolicyId, None, "Policy Id")
+
+    def _getVersion(self):
+        return self.__version
+
+    def _setVersion(self, value):
+        if not isinstance(value, basestring):
+            raise TypeError('Expecting string type for "version" '
+                            'attribute; got %r' % type(value))
+            
+        self.__version = value
+
+    version = property(_getVersion, _setVersion, None, "Policy Version")
+
+    def _getRuleCombiningAlgId(self):
+        return self.__ruleCombiningAlgId
+
+    def _setRuleCombiningAlgId(self, value):
+        if not isinstance(value, basestring):
+            raise TypeError('Expecting string type for "ruleCombiningAlgId" '
+                            'attribute; got %r' % type(value))
+            
+        if value not in Policy.RULE_COMBINING_ALG_IDS:
+            raise AttributeError('%r rule combining algorithm is invalid.  '
+                                 'Only these algorithms are currently '
+                                 'supported %r' % 
+                                 (value, Policy.RULE_COMBINING_ALG_IDS))
+        self.__ruleCombiningAlgId = value
+
+    ruleCombiningAlgId = property(_getRuleCombiningAlgId, 
+                                  _setRuleCombiningAlgId, None, 
+                                  doc="Rule Combining Algorithm Id")
+
 
     @property