wso2 / balana

WSO2 Balana Implementation

---

Branch	Build Status
master

---

Welcome to WSO2 Balana

Balana is WSO2's open source implementation of the XACML specification building on Sun's XACML Implementation. As the name suggests Balana(the fortress) is a powerful entitlement engine to externalize authorization from your applications. With it's modular architecture you can easily develop a fully fledged entitlement solution in no time.

Specifications Supported by Balana

Balana supports the XACML 3.0, 2.0, 1.1 and 1.0 specifications.

Installation

Add the following dependency to your pom.

<dependency>
    <groupId>org.wso2.balana</groupId>
    <artifactId>org.wso2.balana</artifactId>
    <version>1.1.12</version>
 </dependency>

Getting Started

You can easily create a default instance of Balana with a file based policy repository as follows.

private static Balana balana;

private static void initBalana() {

        try{
            // Using file based policy repository. so set the policy location as a system property
            String policyLocation = (new File(".")).getCanonicalPath() + File.separator + "resources";
            System.setProperty(FileBasedPolicyFinderModule.POLICY_DIR_PROPERTY, policyLocation);
        } catch (IOException e) {
            System.err.println("Can not locate policy repository");
        }
        // Create default instance of Balana
        balana = Balana.getInstance();
    }

Running Samples

1. Install Java SE Development Kit 1.8
2. Install Apache Maven 3.x.x(https://maven.apache.org/download.cgi#)
3. Get a clone from https://github.com/wso2/balana.git or download the source
4. Run mvn clean install from balana directory
5. Move to balana/modules/balana-samples/<selected sample>
6. Execute run script

Here are the samples included.

• kmarket-trading-sample
• hierarchical-resource
• custom-combining-algo
• web-page-image-filtering

License

License of Sun's XACML implementation can be found at here. But WSO2 Balana implementation is released under Apache2 license.

balana's Issues

encode() method of PolicySet misses xml namespace

Compared to the encode() method of Policy, encode() method of PolicySet doesn't include "xmlns= " + metaData.getXACMLIdentifier() . Since the version id of XACML is in the xml namespace, there's no information about version id in the encoded PolicySet node.

If we use the resulted string to load a policy, because there's no information about version id, balana will treat it as xacml version 2.0 by default instead of the correct version.

When there are more obligations to return in the XACML response. Bottleneck is created when encoding them in to Strings

Refer https://wso2.org/jira/browse/COMMONS-87

multiple:content-selector invalid response

Refer https://wso2.org/jira/browse/COMMONS-97

NAME_X500NAME_REGEXP_MATCH

balana/modules/balana-core/src/main/java/org/wso2/balana/cond/MatchFunction.java

Line 232 in 9088b3a

set.add(NAME_X500NAME_MATCH);

The second

set.add(NAME_X500NAME_MATCH);

should be:

set.add(NAME_X500NAME_REGEXP_MATCH);

See also:
https://issues.jboss.org/browse/SECURITY-853

Balana fails to handle Linux hidden files

Balana throws following exception, if the policy directory has ".directory'" hidden folder or hidden files like *.swp.

01-Sep-2016 13:06:38.581 SEVERE [http-nio-8445-exec-10] org.wso2.balana.finder.impl.FileBasedPolicyFinderModule.loadPolicy Fail to load policy : /home/user/aai-dev/xacml/xacml/policies/.direc
tory
org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 1; Content is not allowed in prolog.
at com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(DOMParser.java:257)
at com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.java:339)
at javax.xml.parsers.DocumentBuilder.parse(DocumentBuilder.java:121)
at org.wso2.balana.finder.impl.FileBasedPolicyFinderModule.loadPolicy(FileBasedPolicyFinderModule.java:220)
at org.wso2.balana.finder.impl.FileBasedPolicyFinderModule.loadPolicies(FileBasedPolicyFinderModule.java:188)
at org.wso2.balana.finder.impl.FileBasedPolicyFinderModule.init(FileBasedPolicyFinderModule.java:79)
at org.wso2.balana.finder.PolicyFinder.init(PolicyFinder.java:149)
at org.wso2.balana.PDP.(PDP.java:97)
......

Do you know how to make balana lax about reading the policy directory - thanks!?

WSO2 xercesImpl missing from Maven Central (groupId=xerces.wso2)

Description:
balana-core module depends on org.wso2.balana.utils which depends on (xerces.wso2) xercesImpl. However, xercesImpl is not available on Maven Central whereas the others are. Therefore, one may need to add the WSO2 repository to the POM or Maven settings exclusively for the xercesImpl dependency in order to use Balana. It would make things much easier if the xercesImpl was on Maven Central as well. It is useless to put artifacts on Maven Central if their required dependencies are not.

The alternative is to remove xercesImpl dependency: #82

Suggested Labels:
bug, enhancement (depending on how critical you think it is)

Suggested Assignees:

Affected Product Version:
1.1.11

OS, DB, other environment details and versions:

Steps to reproduce:
Try to build a project with Balana (org.wso2.balana) dependency, without WSO2 maven repository

Related Issues:
Related to #82 which suggests to remove xercesImpl which would fix the issue better.

No getting started documentation

Despite the prescene of a documentation pom, there does not appear to be any getting started/on-boarding documentation for Balana.

I want to start a PDP with a Policy String

Description:
I literally just want to create an XML String for a policy. Then I want to create a PDP to evaluate that Policy.

I ONLY WANT AN INSTANTIATION METHOD THAT ACCEPTS A STRING!

I DON'T WANT TO BUILD A BUNCH OF FINDERS!

Delegation profile with Balana

Is there any implementation and support for Administrative Delegation Profile with Balana. I am trying to use Balana for developing prototype application to demonstrate the Delegation with Balana. Please comment if any good resources on this direction.

Attribute finder can store attribute values as thread local variable to imporve preformance

Refer https://wso2.org/jira/browse/COMMONS-104

No possibility to change the root PolicyCombiningAlgorithm

Hi

I am using Balana as you do it in your samples with the FileBasedPolicyFinderModule (https://github.com/wso2/balana/blob/master/modules/balana-core/src/main/java/org/wso2/balana/finder/impl/FileBasedPolicyFinderModule.java) to find my policy files. But the problem is that the policy combining algorithm is hard coded there. (deny-overrides algorithm)

See https://github.com/wso2/balana/blob/master/modules/balana-core/src/main/java/org/wso2/balana/finder/impl/FileBasedPolicyFinderModule.java on line 92:
combiningAlg = new DenyOverridesPolicyAlg();

I don't see any possibilities to change that. How can I define the combining algorithm if I have multiple policies (multiple XACML files inside the configured folder)? I know that I can use PolicySet's and define the algorithm there, but then I have to put all my policies into a single file. If I use separate files for the policies and create a PolicySet with Policy-References, it still uses the default DenyOverridesPolicyAlg.

Do I miss something here? Any ideas?

Balana not generating any log statements

Description:
While some classes seem to import org.apache.commons.LogFactory to create a logger, it never seems to be used anywhere. Also checking our logs, there seems to be absolutely no log statement coming from Balana.
This makes debugging policy evaluations inside Balana extremely difficult and cumbersome.

Suggested Labels:

• none -

Suggested Assignees:

• unknown

Affected Product Version:
All versions up to v1.1.3

OS, DB, other environment details and versions:
All environments

Steps to reproduce:
Embed Balana, use a log4j.xml or a logback.xml and increase log level to debug or even trace.

Related Issues:
none

javax.xml.namespace - Build Error on Java8

When building balana, I get the following error:

[WARNING] Warning building bundle org.wso2.balana:org.wso2.balana.utils:bundle:1.0.6-SNAPSHOT : Did not find matching referal for !javax.xml.namespace
[WARNING] Warning building bundle org.wso2.balana:org.wso2.balana.utils:bundle:1.0.6-SNAPSHOT : Importing packages that are never refered to by any class on the Bundle-Classpath[Jar:dot]: [javax.xml.namespace]
[ERROR] Error building bundle org.wso2.balana:org.wso2.balana.utils:bundle:1.0.6-SNAPSHOT : Unresolved references to [javax.xml] by class(es) on the Bundle-Classpath[Jar:dot]: [org/wso2/balana/utils/Utils.class]
[ERROR] Error(s) found in bundle configuration

Is that a known issue?

AttributeAssignment encoder adds new line in content

org.wso2.balana.ctx.AttributeAssignment.encode(StringBuilder) returns a xmlstring.
It adds a new line character before the content of the assignment is printed.
This should not happen (at least not for most dataTypes).

Errors generating javadocs with maven.

Description:
When running mvn javadoc:javadoc it fails because of some tags like <code>StringBuilder<code> where the closing <code> is supposed to be </code>

Steps to reproduce:

1. Checkout the master branch
2. Run mvn javadoc:javadoc

Repo to get balana from

Hi Guys,
I plan to use balana as a dependency to one of my modules. Is it correct way to include it
// https://mvnrepository.com/artifact/org.wso2.balana/org.wso2.balana
libraryDependencies += "org.wso2.balana" % "org.wso2.balana" % "1.0.0-wso2v7"
as shown in the link below
https://mvnrepository.com/artifact/org.wso2.balana/org.wso2.balana/1.0.0-wso2v7
?
But that seems to have released on 2013. And here(https://github.com/wso2/balana/releases/tag/v1.1.3) there is version 1.1.3, which seems very recent. But its not hosted in maven?

Please let me know if there are instructions somewhere. thanks

Function "urn:oasis:names:tc:xacml:3.0:function:string-starts-with" not supported

Description:
The function "urn:oasis:names:tc:xacml:3.0:function:string-starts-with" is not supported.
This seems to be in conflict with the XACML 3 spec:
http://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-cd-1-en.html

10.2.8 Functions

The implementation MUST properly process those functions associated with the identifiers marked with an "M".
[...]
urn:oasis:names:tc:xacml:3.0:function:string-starts-with -> M

Affected Product Version:

		<groupId>org.wso2.balana</groupId>
		<artifactId>org.wso2.balana</artifactId>
		<version>1.1.5</version>

Steps to reproduce:

Create a policy with an according matcher:

				<Match MatchId="urn:oasis:names:tc:xacml:3.0:function:string-starts-with">
					<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">whatever</AttributeValue>
					<AttributeDesignator
						AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id"
						Category="urn:oasis:names:tc:xacml:3.0:attribute-category:resource"
						DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="true" />
				</Match>

When multiple request profile is used. "ReturnPolicyIdList" is not working

Refer https://wso2.org/jira/browse/COMMONS-99

Bug in ConfigurationStore.getArgs - order of arguments missed

I do a PolicyFinderModule with a constructor with 9 arguments. When balana build de configuration it fails because the arguments of my constructor are in bad order. I put it all in correct order in the balana.xml file, but when it parse the configuration, it fails.

I think it's because in the method org.wso2.balana.ConfigurationStore.getArgs the arguments are stored in a Set, instead of a List. In that point, the order is missed.

This is the code:

private Set getArgs(Node root) {
        Set args = new HashSet();
        NodeList children = root.getChildNodes();

        for (int i = 0; i < children.getLength(); i++) {
            Node child = children.item(i);
            String name = DOMHelper.getLocalName(child);

            if (child.getNodeType() == Node.ELEMENT_NODE) {
                if (name.equals("string")) {
                    args.add(child.getFirstChild().getNodeValue());
                } else if (name.equals("set")) {
                    args.add(getArgs(child));
                } else {
                    throw new IllegalArgumentException("unkown arg type: " + name);
                }
            }
        }

        return args;
    }

The problem is that args is a Set, but It must be a List in order to keep the order in the xml.

Can you fix it?

Thanks.

Performance improvements in Balana

Refer https://wso2.org/jira/browse/COMMONS-98

REST API

Hi

What i understand from the documentation and blogs that balana supports PDP part of Xacml authorization stack, Can you provide me how can we use this as a service with Http layer on top of it ? or is there any existing http transport layer supported by it ?

Balana supports some deprecated fuctions. Not then new XACML 3.0 functions

Refer https://wso2.org/jira/browse/COMMONS-102

ObligationId not accessible

The following private fields do not have a getter which makes them inaccessible from the java object.
org.wso2.balana.xacml2.Obligation.obligationId
org.wso2.balana.xacml3.Obligation.obligationId

Unless this is done on purpose (why would that be?), you should add a getter for the URI.

Hello, I want to use this balana engine for researching on XACML.

But It has no description about getting started.
can you help me to do?
I want to put my XACML policy in engine and get the result simply.
Thanks!

Function Factory can not be configured via Balana configuration file.

Refer https://wso2.org/jira/browse/COMMONS-89

PolicySet String/xml econding missing namespace

under balana-core
the method encode(StringBuilder builder) of org.wso2.balana.PolicySet (see https://github.com/wso2/balana/blob/master/modules/balana-core/src/main/java/org/wso2/balana/PolicySet.java)

misses the namespace declaration.

builder.append("<PolicySet PolicySetId=\"")

should be something like this:

builder.append("<PolicySet xmlns=\"" + metaData.getXACMLIdentifier() + "\" PolicySetId=\"")

Some prolems in run.bat at balana-samples

Hello, I want to run kmarket-trading-sample, but I meet a problem.

"오류: 기본 클래스 ~~~(를) 찾거나 로드할 수 없습니다." means "Error: Class not Found".
I thought, there is could be some errors in the bat script, so I debugged.

(I inserted some debug echo)

I don't know 'bat' script, but I noticed BALANA_PATH dosen't set correctly.
I think, some errors or bugs in the script.
Could you fix bat script?

Thanks

AttributeFinder not called for some categories

I'm facing a strange problem where my AttributeFinder doesn't get called for some attributes.
I have many different categories in my policies, all of the form some:path:describing:where:to:find:the:attribue. It seems random to me which categories will be accepted and which not. For example, test:auth will but test:auth1 and test:auth:something will not.

My AttributeFinder does not override getSupportedIds() and getSupportedCategories(). The doc says, that it will be responsible for any category/id pair in that case. Btw: Are those methods really necessary? It seems that they are not called during an evaluation...

Am I doing something wrong here?

Using balana with php

Description:
I want to execute the run script using php commands. But shell_exec does not word for balana, it works for other simple commands. Can someone help? It's urgent.

StackOverflow Exception in PDP.processPolicyReferences

you have a PolicySet containing PolicyA and PolicyB (directly, without any references).

Then https://github.com/wso2/balana/blob/master/modules/balana-core/src/main/java/org/wso2/balana/PDP.java#L332 causes a StackOverflow exception, because it calls the policy instead of the children policy.

There is literally no documentation

Description:
There is no documentation about how to use this product.

[balana] policyReference

Refer https://wso2.org/jira/browse/COMMONS-88

Error while running kmarket-trading

Description:
I am running the run.bat command form the command line and I am getting MissingAttributeDetail error.

Jan 22, 2018 2:06:35 PM org.wso2.balana.finder.PolicyFinder findPolicy
SEVERE: An error occured while trying to find a single applicable policy for a request: Couldn't find AttributeDesignator attribute

======================== XACML Response ===================

<Response xmlns="urn:oasis:names:tc:xacml:3.0:core:schema:wd-17"><Result><Decision>Indeterminate</Decision><Status><StatusCode Value="urn:oasis:names:tc:xacml:1.0:status:missing-attribute"/><StatusMessage>Couldn't find AttributeDesignator attribute</StatusMessage><StatusDetail>
<MissingAttributeDetail AttributeId="http://kmarket.com/id/role" DataType="http://www.w3.org/2001/XMLSchema#string" Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject" ></MissingAttributeDetail>
</StatusDetail></Status></Result></Response>

===========================================================

Can anyone tell me what am i doing wrong?

balana-samples findAttribute never called

Description:
When running the org.wso2.balana.samples.kmarket.trading or org.wso2.balana.samples.image.filter projects, it appears that the findAttribute method is never called, as an NA response is always returned:

<Response xmlns="urn:oasis:names:tc:xacml:3.0:core:schema:wd-17"><Result><Decision>NotApplicable</Decision><Status><StatusCode Value="urn:oasis:names:tc:xacml:1.0:status:ok"/></Status></Result></Response>

Suggested Labels:
balana-samples, attribute finders

Suggested Assignees:
N/A

Affected Product Version:
1.1.6-SNAPSHOT

OS, DB, other environment details and versions:
Windows 10 x64

Steps to reproduce:
Run KMarket trading sample app with the following inputs:
Enter User name : alice
Enter Product Id : 2
Enter No of Products : 5

-OR-

Simply run the image filtering sample

Related Issues:
N/A

[Suggestion] Add status check to pull request merges

In my fork I've added status checks with Travis so all Tests are run on pull requests before they are accepted. This prevents users from checking in changes which break the unit tests.

https://travis-ci.org/bergerst/balana

The setup of Travis with the balana project only takes about 10 to 15 minutes and decreases the workload of both pull requestors and request reviewers.

Balana sample not working

After building and trying to run the sample, it fails with the below error.

Nov 15, 2016 7:14:54 AM org.wso2.balana.ConfigurationStore setupConfig
INFO: Loading runtime configuration
Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/xerces/util/SecurityManager
at org.wso2.balana.utils.Utils.getSecuredDocumentBuilderFactory(Utils.java:107)
at org.wso2.balana.ConfigurationStore.getRootNode(ConfigurationStore.java:309)
at org.wso2.balana.ConfigurationStore.setupConfig(ConfigurationStore.java:201)
at org.wso2.balana.ConfigurationStore.(ConfigurationStore.java:163)
at org.wso2.balana.Balana.(Balana.java:116)
at org.wso2.balana.Balana.getInstance(Balana.java:228)
at org.wso2.balana.samples.custom.algo.Main.initBalana(Main.java:102)
at org.wso2.balana.samples.custom.algo.Main.main(Main.java:47)
Caused by: java.lang.ClassNotFoundException: org.apache.xerces.util.SecurityManager
at java.net.URLClassLoader$1.run(URLClassLoader.java:366)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:425)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:358)
... 8 more

after adding the

<dependency>
  <groupId>xerces.wso2</groupId>
  <artifactId>xercesImpl</artifactId>
  <version>2.8.1.wso2v2</version>
</dependency>

manually to the lib folder in each sample it works!

[Suggestion] Attribute finders and the PDP should have separate build cycles.

In my current project we have several attribute finder types with either SQL, REST or SOAP integration. And there are more to come. It should not be necessary to rebuild and release the PDP every time I want to add another attribute finder. An attribute finder should be built and tested as a separate artifact implementing some interface (or perhaps extending the existing abstract AttributeFinderModule), and then plugged back into the PDP at start-up through the configuration.

Any thoughts?

Unable to create XACML policy in WSO2 IS Key Manager

Hi,

We're trying to add a policy in WSO2 Identity Server Key Manager and facing this error:
Error while adding entitlement policy. Invalid Entitlement Policy. Policy is not valid according to XACML schema

Description:
The issue occurs due to the invalid format of XACML policy created by Saxon XSLT processor

The Utils class file in balana module (balana\modules\balana-utils\src\main\java\org\wso2\balana\utils) determines which XSLT processor would be used for creating the XML document.

If we keep Saxon-he-9.4 jar at \wso2is-km-5.3.0\lib\endorsed
• javax.xml.transform.TransformerFactory creates a Saxon Processor instance
• It also adds an additional attribute xmlns=”“ in as well as tag in the xml document leading an invalid XML format for policy. So we're unable to add/create policy

If we remove the Saxon-he-9.4 jar
• javax.xml.transform.TransformerFactory creates a Xalan Processor instance
• The XML created for policy is valid and the policy is added successfully.

Product Version : WSO2 IS - KM - 5.3.0

Steps to reproduce:

1. Log in to WSO2 IS Key Manager
2. In the Main tab on the Home panel on the left, under the Entitlement section, click on Policy administration.
3. Click on Add new Entitlement policy. Refer to the following URL on creating a XACML policy
   https://docs.wso2.com/display/IS510/Creating+a+XACML+Policy
4. Click on Simple Policy Editor
5. Fill in the form fields and click on Finish.

This issue has also been reported at https://wso2.org/jira/browse/IDENTITY-3482

Policies can not be retrieved from registry policy finder module

Refer https://wso2.org/jira/browse/COMMONS-96

VariableReference doesn't implement Evaluatable

Are there any reason that VariableReference doesn't implement Evaluatable?
So I can't use VariableReference tag in Condition tag...

XPath is not evaluated when content element contains more than one child namespaces

Refer https://wso2.org/jira/browse/COMMONS-103

function <any-of-all> implementation is not correct

according to HigherOrderFunction.java:
any-of-all and all-of-any both use a private function allOfAny(),the difference is just switch the bag parameter's order. but it is not correct.
for example:
any-of-all("string-equal",["a","b","c"],["a","b"]) returns TRUE,
any-of-all("string-equal",["a","b"],["a","b"]) returns TRUE,
but according to the specification. Obviousely it should be false.

I also use at&t's implementation to do the same test,both returns false.

Improve Balana README.md

I came up with below sketch to improve the README.md
@bergerst WDYT?

WSO2 Balana

---

Branch	Build Status
master

---

Welcome to WSO2 Balana.

Balana is WSO2's open source implementation of the XACML specification building on Sun's XACML Implementation[1]. As the name suggests Balana(the fortress) is a powerful entitlement engine to externalize authorization from your applications. With it's modular architecture you can easily develop a fully fledged entitlement solution in no time.

Specification Supported by Balana
Balana supports the XACML 3.0, 2.0, 1.1 and 1.0 specifications. Balana

Module of Balana

• balana-core
  <WRITE_MORE_DETAILS>
• balana-samples
  <DESCRIBE_THIS_MORE>
• balana-utils
  <MORE_DETAILS>

Samples

We have a few samples to get you started. With each of these samples we focus on introducing different aspects of Balana showcasing it's extendability.

custom combining algo sample

hirarchical resource

kmarket-trading sample

web-page-image-filering

<WHAT DOES EACH SAMPLE DO?>

Extensions
<EXTENSION_POINTS_OFFERED_ BY_BALANA>

// LICENCE AND OTHER BORING STUFF HERE

[1] http://sunxacml.sourceforge.net/
[2] http://sunxacml.sourceforge.net/license.txt
[3] http://www.apache.org/licenses/LICENSE-2.0

EqualFunction corner case for string "Any"

Hi!
I was going through the implementation of the EqualFunction and saw this fragment

if (argValues[1] instanceof StringAttribute && XACMLConstants.ANY.equals(((StringAttribute) argValues[1]).getValue())) { return EvaluationResult.getInstance(true); }

If argValues[1], which comes from an AttributeDesignator, has the value "Any" then the evaluation result is true. What is the purpose of this corner-case? Is the keyword "Any" acting as a wildcard sort of thing, for example if my Attribute Designator returns the value "Any", then the evaluation is automatically true?

Thanks in advance,
Dan

Support for json profile

Hi,

Does balana support xacml 3.0 json profile?

Thanks,
Shiraz

"PermitUnlessDeny" Policy combining algorithm is not working properly in Balana

Refer https://wso2.org/jira/browse/COMMONS-100

Wrong synchronization pattern in Balana.java

Hi

Balana.java uses "wrong" mechanisms for synchronization, e.g.

public Balana getInstance(String identifier){
if(balana == null){
synchronized (lock){
if(balana == null){
balana = new Balana(identifier, identifier, identifier, identifier);
}
}
}
return balana;
}

Please consult well-known articles and books on the issue, for instance:
"Java Concurrency in Practice, Brian Goetz and co"

There are numerous ways to fix this code. Normally, you should avoid any kind of locking for class-wide attributes from a performance and scalability perspective. You should consider to make all the dependencies in Balana's constructor as immutable field (private final X x). Furthermore, consider to make all attributes immutable (final) such that Balana per definition becomes thread-safe.

Perhaps, you could use the following pattern:
public final class Balana {
private final String name;
private Balana(final String name) {
this.name = name;
}
public final static class BalanaFactory {
public final static Balana SINGLETON;
static {
final String name = "ABC"; // here, you should make the lookups...
// to read the name
SINGLETON = new Balana(name);
}
private BalanaFactory() {
}
}
}
Note that the above factory class is thread safe while it does not use any form of locking.

Good luck

GeoXACML implementation

Is there anybody or any sample that has GeoXACML implementation with the balana library?

References :

• https://www.semanticscholar.org/paper/Location-attestation-and-access-control-for-mobile-Arunkumar-Soyluoglu/9c56bb9c93dfd5df97da9037b1c20894b0784844

• https://www.opengeospatial.org/standards/geoxacml

XACML3 Result is not XSD compliant

Description:
When balana is generating a XACML 3.0 it is not XSD compliant. The element order should be
Decision, Status , Obligations, AssociatedAdvise, Attributes and PolicyIdentifierList. Balana puts the Attributes after the PolicyIdentifierList.

Affected Product Version:
Latest release and snapshot

Steps to reproduce:
Validate a full blown XACML Response through an XML validator.

Remove dependency to xercesImpl

Description:

Having xercesImpl as a dependency leads to all sorts of problems

Suggested Labels:

dependency problem,xercesImpl

Suggested Assignees:

Affected Product Version:
1.1.3
OS, DB, other environment details and versions:
All

Steps to reproduce:

Related Issues: