ndg.xacml.core.policy_combining_alg.DenyOverridesPolicyCombiningAlg

Class DenyOverridesPolicyCombiningAlg

object --+ | PolicyCombiningAlgInterface --+ | DenyOverridesPolicyCombiningAlg

Deny overrides policy combining algorithm

Instance Methods

ndg.xacml.core.context.result.Decision

evaluate(self, policies, context)
Combine the input policy results to make an access control decision.

source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __init__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Properties

[hide private]

Inherited from object: __class__

evaluate(self, policies, context)

source code

Combine the input policy results to make an access control decision. Implementation taken directly from XACML 2.0 spec. pseudo code - Section C.1 Deny Overrides

Parameters:

policies (TypedList(<ndg.xacml.core.policybase.PolicyBase>)) - policies and/or policy sets. Decisions from these will be put together into a single decision by this algorithm.
context (ndg.xacml.core.request.Request) - request context to apply to the rules

Returns: ndg.xacml.core.context.result.Decision

resulting overall access control decision

Overrides: PolicyCombiningAlgInterface.evaluate