IG 2023.11

PolicyDecisionContext

Provides attributes and advices returned by AM policy decisions. When the PolicyEnforcementFilter processes a request, it injects the attributes and advices into this context.

Properties

The context is named policyDecision, and is accessible at ${contexts.policyDecision}. The context has the following properties:

"attributes": java.util.Map

A map with the format Map<String, List<String>>, where:

  • Key: Attribute name.

  • Value: A One or more attribute values provided in the policy decision. Can be empty, but not null.

"jsonAttributes": java.util.Map

A map with the format Map<String, List<String>>, where:

  • Key: Attribute name.

  • Value: One or more attribute values provided in the policy decision. Can be empty, but not null.

"advices": java.util.Map

A map with the format Map<String, List<String>>, where:

  • Key: Advice name.

  • Value: One or more advice values provided in the policy decision. Can be empty, but not null.

"jsonAdvices": java.util.Map

A map with the format Map<String, List<String>>, where:

  • Key: Advice name

  • Value: One or more advice values provided in the policy decision. Can be empty, but not null.

"actions": java.util.Map

A map with the format Map<String, Boolean> where:

  • Key: Action name.

  • Value: true when an action is allowed for the specified resource, false otherwise. Cannot be null.

"jsonActions": json.JsonValue

A map with the format Map<String, Boolean>, where:

  • Key: Action name.

  • Value: true when an action is allowed for the specified resource, false otherwise. Cannot be null.

"resource": java.lang.String

The resource value used in the policy request. Can be empty, but not null.

Copyright © 2010-2023 ForgeRock, all rights reserved.