Policy Decision Provider (PDP)

IPolicyDecisionService in assembly SanteDB.Core.Api version 3.0.1980.0

Summary

Represents a policy decision service

Operations

OperationResponse/ReturnInput/ParameterDescription

GetEffectivePolicySet

IEnumerable<IPolicyInstance>

IPrincipal securable

Get all active policies for the specified securable type

GetPolicyDecision

PolicyDecision

IPrincipal principal Object securable

Make a simple policy decision for a specific securable

GetPolicyOutcome

PolicyGrantType

IPrincipal principal String policyId

Get a policy decision outcome (i.e. make a policy decision)

ClearCache

void

IPrincipal principal

Clear the policy cache for the specified principal

ClearCache

void

String principalName

Clear the policy cache for the specified principal

Implementations

ClientPolicyDecisionProviderService - (SanteDB.Client.Disconnected)

Represents a PDP service which can map between server permissions and the client permissions

Service Registration

...
<section xsi:type="ApplicationServiceContextConfigurationSection" threadPoolSize="4">
	<serviceProviders>
		...
		<add type="SanteDB.Client.Disconnected.Services.ClientPolicyDecisionProviderService, SanteDB.Client.Disconnected, Version=3.0.1980.0, Culture=neutral, PublicKeyToken=null" />
		...
	</serviceProviders>

Default PDP Service - (SanteDB.Core.Api)

Local policy decision service

Service Registration

...
<section xsi:type="ApplicationServiceContextConfigurationSection" threadPoolSize="4">
	<serviceProviders>
		...
		<add type="SanteDB.Core.Security.DefaultPolicyDecisionService, SanteDB.Core.Api, Version=3.0.1980.0, Culture=neutral, PublicKeyToken=null" />
		...
	</serviceProviders>

Example Implementation

/// Example Implementation
using SanteDB.Core.Security.Services;
/// Other usings here
public class MyPolicyDecisionService : SanteDB.Core.Security.Services.IPolicyDecisionService { 
	public String ServiceName => "My own IPolicyDecisionService service";
	/// <summary>
	/// Get all active policies for the specified securable type
	/// </summary>
	public IEnumerable<IPolicyInstance> GetEffectivePolicySet(IPrincipal securable){
		throw new System.NotImplementedException();
	}
	/// <summary>
	/// Make a simple policy decision for a specific securable
	/// </summary>
	public PolicyDecision GetPolicyDecision(IPrincipal principal,Object securable){
		throw new System.NotImplementedException();
	}
	/// <summary>
	/// Get a policy decision outcome (i.e. make a policy decision)
	/// </summary>
	public PolicyGrantType GetPolicyOutcome(IPrincipal principal,String policyId){
		throw new System.NotImplementedException();
	}
	/// <summary>
	/// Clear the policy cache for the specified principal
	/// </summary>
	public void ClearCache(IPrincipal principal){
		throw new System.NotImplementedException();
	}
	/// <summary>
	/// Clear the policy cache for the specified principal
	/// </summary>
	public void ClearCache(String principalName){
		throw new System.NotImplementedException();
	}
}

References

PreviousPassword Validation ServiceNextPolicy Enforcement Provider (PEP)

Last updated