The HERAS-AF XACML Core component supports two simple policy repositories (an ordered and an unordered one).
Mentions about the simple policy repositories:
- No persistence of the policies (availability only at runtime)
- No resolution of remote references
- No possibility of applying a diff onto the deployed policies
- No possibility to retrieve older versions
The "simple" policy repositories are not recommended for use in a productive environment!
PDP configuration
Configuring the PDP to use the unordered policy repository:
The factory uses the unordered policy repository by default.
Configuring the PDP to use the ordered policy repository:
The PDP always returns a PolicyRepository (unordered). If the PDP contains an ordered policy repository it must be casted.