Changeset 6643 for TI12-security/trunk/NDGSecurity

Timestamp:

25/02/10 16:39:54 (11 years ago)

Author:

pjkersha

Message:

Contd port of MSI Policy + PDP implementation to XACML 2.0

Location:

TI12-security/trunk/NDGSecurity/python/ndg_security_common/ndg/security/common/authz/xacml

Files:

• __init__.py (modified) (2 diffs)
• action.py (modified) (1 diff)
• attribute.py (added)
• condition.py (added)
• environment.py (modified) (1 diff)
• match.py (added)
• pap.py (added)
• pdp.py (added)
• pip.py (added)
• policy.py (modified) (1 diff)
• resource.py (modified) (1 diff)
• rule.py (modified) (2 diffs)
• subject.py (modified) (1 diff)
• target.py (modified) (2 diffs)

TI12-security/trunk/NDGSecurity/python/ndg_security_common/ndg/security/common/authz/xacml/__init__.py

@@ -5 +5 @@
     __slots__ = ('__xmlns', )
 
+    ELEMENT_LOCAL_NAME = None
+    
     def __init__(self):
         self.__xmlns = PolicyComponent.XACML_2_0_XMLNS
@@ -23 +25 @@
     def isValidXmlns(self):
         return self.xmlns in PolicyComponent.XMLNS
+    
+    
+class RequestPropertyBase(PolicyComponent):
+    """Base type for Subject, Resource, Action and Environment types"""
+    MATCH_TYPE = None
+    
+    __slots__ = ('__matches', )
+    
+    def __init__(self):
+        # Derived types can specify the type for matches via the MATCH_TYPE
+        # class variable
+        self.__matches = TypedList(self.__class__.MATCH_TYPE)
+        
+    @property
+    def matches(self):
+        return self.__matches

TI12-security/trunk/NDGSecurity/python/ndg_security_common/ndg/security/common/authz/xacml/action.py

@@ -4 +4 @@
 @author: pjkersha
 '''
-from ndg.security.common.authz.xacml import PolicyComponent
+from ndg.security.common.authz.xacml import RequestPropertyBase
+from ndg.security.common.authz.xacml.match import ActionMatch
 
-class Action(PolicyComponent):
-    pass
+
+class Action(RequestPropertyBase):
+    MATCH_TYPE = ActionMatch
+    ELEMENT_LOCAL_NAME = 'Action'
+    
+    __slots__ = ()
+    
+    @property
+    def actionMatches(self):
+        return self.matches

TI12-security/trunk/NDGSecurity/python/ndg_security_common/ndg/security/common/authz/xacml/environment.py

@@ -4 +4 @@
 @author: pjkersha
 '''
-from ndg.security.common.authz.xacml import PolicyComponent
+from ndg.security.common.authz.xacml import RequestPropertyBase
+from ndg.security.common.authz.xacml.match import EnvironmentMatch
 
-class Environment(PolicyComponent):
-    pass
+
+class Environment(RequestPropertyBase):
+    MATCH_TYPE = EnviornmentMatch
+    ELEMENT_LOCAL_NAME = 'Environment'
+    
+    __slots__ = ()
+    
+    @property
+    def environmentMatches(self):
+        return self.matches

TI12-security/trunk/NDGSecurity/python/ndg_security_common/ndg/security/common/authz/xacml/policy.py

@@ -137 +137 @@
     def obligations(self):
         return self.__obligations 
-                     
-    def _getPolicyFilePath(self):
-        return self.__policyFilePath
-
-    def _setPolicyFilePath(self, value):
-        if not isinstance(value, basestring):
-            raise TypeError('Expecting string type for "policyFilePath" '
-                            'attribute; got %r' % type(value))
-            
-        self.__policyFilePath = value
-
-    policyFilePath = property(_getPolicyFilePath, _setPolicyFilePath, 
-                              doc="Policy file path")
 
     def _getTargets(self):

TI12-security/trunk/NDGSecurity/python/ndg_security_common/ndg/security/common/authz/xacml/resource.py

@@ -5 +5 @@
 '''
 from ndg.security.common.authz.xacml import PolicyComponent
+from ndg.security.common.authz.xacml.match import ResourceMatch
 
-class Resource(PolicyComponent):
-    pass
 
+class Resource(RequestPropertyBase):
+    MATCH_TYPE = ResourceMatch
+    ELEMENT_LOCAL_NAME = 'Resource'
+    
+    __slots__ = ()
+    
+    @property
+    def resourceMatches(self):
+        return self.matches

TI12-security/trunk/NDGSecurity/python/ndg_security_common/ndg/security/common/authz/xacml/rule.py

@@ -7 +7 @@
 from ndg.security.common.authz.xacml import PolicyComponent
 from ndg.security.common.authz.xacml.target import Target
+from ndg.security.common.authz.xacml.condition import Condition
 
 
 class Rule(PolicyComponent):
-    __slots__ = ('__target',)
+    """XACML Policy Rule"""
+    ELEMENT_LOCAL_NAME = 'Rule'
+    
+    __slots__ = (
+        '__targets', 
+        '__conditions', 
+        '__description', 
+        '__id', 
+        '__effect'
+    )
     
     def __init__(self):
+        self.__id = None
+        self.__effect = None
         self.__targets = TypedList(Target)
+        self.__conditions = TypedList(Condition)
         
     @property
@@ -19 +32 @@
         "list of Rule targets"
         return self.__targets
+    
+    @property
+    def conditions(self):
+        "list of rule conditions"
+        return self.__conditions
+       
+    def _get_id(self):
+        return self.__id
 
+    def _set_id(self, value):
+        if not isinstance(value, basestring):
+            raise TypeError('Expecting %r type for "id" '
+                            'attribute; got %r' % (basestring, type(value)))
+            
+        self.__id = value   
+
+    id = property(_get_id, _set_id, None, "Rule identifier attribute")  
+      
+    def _get_effect(self):
+        return self.__effect
+
+    def _set_effect(self, value):
+        if not isinstance(value, basestring):
+            raise TypeError('Expecting %r type for "effect" '
+                            'attribute; got %r' % (basestring, type(value)))
+            
+        self.__effect = value   
+
+    effect = property(_get_effect, _set_effect, None, 
+                      "Rule effect attribute")  
+
+    def _getDescription(self):
+        return self.__description
+
+    def _setDescription(self, value):
+        if not isinstance(value, basestring):
+            raise TypeError('Expecting string type for "description" '
+                            'attribute; got %r' % type(value))
+        self.__description = value
+
+    description = property(_getDescription, _setDescription, 
+                           doc="Rule Description text")

TI12-security/trunk/NDGSecurity/python/ndg_security_common/ndg/security/common/authz/xacml/subject.py

@@ -5 +5 @@
 '''
 from ndg.security.common.authz.xacml import PolicyComponent
+from ndg.security.common.authz.xacml.match import SubjectMatch
 
-class Subject(PolicyComponent):
-    pass
+class Subject(RequestPropertyBase):
+    MATCH_TYPE = SubjectMatch
+    ELEMENT_LOCAL_NAME = 'Subject'
+    
+    __slots__ = ()
+    
+    @property
+    def subjectMatches(self):
+        return self.matches

TI12-security/trunk/NDGSecurity/python/ndg_security_common/ndg/security/common/authz/xacml/target.py

@@ -5 +5 @@
 '''
 from ndg.security.common.utils import TypedList
+from ndg.security.common.authz.xacml import PolicyComponent
 from ndg.security.common.authz.xacml.action import Action
 from ndg.security.common.authz.xacml.resource import Resource
@@ -47 +48 @@
         '__attributes',
         '__regEx'       
-    )    
+    )
+      
     def __init__(self):
         super(Target, self).__init__()