IG 7.2.0

PolicyDecisionContext

Provides attributes and advices returned by AM policy decisions. When the PolicyEnforcementFilter processes a request, it injects the attributes and advices into this context.

Properties

The context is named policyDecision, and is accessible at ${contexts.policyDecision}. The context has the following properties:

"attributes": unmodifiable map

A map of attribute names to their values, provided in the policy decision. Can be empty, but not null.

"jsonAttributes": JsonValue

A map of attribute names to their values, provided in the policy decision. Cannot be null.

"advices": map

A map of advice names to their values, provided in the policy decision. Can be empty, but not null.

"jsonAdvices": JsonValue

A map of advice names to their values, provided in the policy decision. Cannot be null.

"actions": map

A map of action name keys to Boolean values that indicate whether the action is allowed (true) or denied (false) for the specified resource. Can be empty, but not null.

"jsonActions": JsonValue

A map of action name keys to Boolean values that indicate whether the action is allowed (true) or denied (false) for the specified resource. Cannot be null.

"resource": string

The resource value that was used when making the policy request. Can be empty, but not null.

Copyright © 2010-2023 ForgeRock, all rights reserved.