Re: [sunxacml-discuss] Sunxacml and hierarchical roles

[Seth P. <Set...@su...>]

Hi Jake.

On Jan 25, 2006, at 6:43 AM, Jake Wu wrote:
> I am now having a basic question. In XACML-RBAC profile, it has  
> defined
> Permission <PolicySet>, Role <PolicySet> and Role Assingment <Policy>
> separately. Can I use the SUNXACML API to create these files
> individually without the policy referencing actually taking place at
> this stage?

Sure. The APIs let you create a Policy or PolicySet instance, and as  
a child of a PolicySet you can include a PolicyReference. The  
resolution of references happens only when you're trying to evaluate  
the PolicySet. There is some basic example code for building a policy  
in the 1.2 samples, but feel free to mail me or this list if you have  
specific questions about how the code works.


seth