...
Description: As part of the work in POLICY-2112 - it was decided that PAP would be enhanced to send two additional lists to the PDPs of delta policies (policesToBeDeployed & policiesToBeUndeployed) to the PDPs. Sending this these lists of delta policies, eliminated eliminates the need for the PDPs to filter through a full list of policies sent from PAP in order to determine what policies need to be deployed or undeployed. The PAP , being the administration component , now does this work for the PDPs and sends the result. This would mean means that the PDPs need to be modified to handle these delta policies list policy lists to remove the need to filter through the entire list.
...
XACML-PDP has yet to be modified to handle the delta policies.
| Info |
|---|
Maybe below we can add some proposed solutions to this below. |
Proposed approach(es):
1. Add an additional check in PAP to check that the delta policies are a subset of the full list of policies.
2.
3.