@Test public void testGetXacml() throws Exception { String newXacml = XACMLUtils.getXacml(mp, acl); assertThat(the(xacml), isEquivalentTo(the(newXacml))); }
public static String getXacml(MediaPackage mediapackage, AccessControlList accessControlList) throws JAXBException { ObjectFactory jbossXacmlObjectFactory = new ObjectFactory(); PolicyType policy = new PolicyType(); policy.setPolicyId(mediapackage.getIdentifier().toString()); policy.setVersion("2.0"); policy.setRuleCombiningAlgId(XACMLUtils.RULE_COMBINING_ALG); TargetType policyTarget = new TargetType(); ResourcesType resources = new ResourcesType(); ResourceType resource = new ResourceType(); ResourceMatchType resourceMatch = new ResourceMatchType(); resourceMatch.setMatchId(XACMLUtils.XACML_STRING_EQUAL); AttributeValueType resourceAttributeValue = new AttributeValueType(); resourceAttributeValue.setDataType(XACMLUtils.W3C_STRING); resourceAttributeValue.getContent().add(mediapackage.getIdentifier().toString()); AttributeDesignatorType resourceDesignator = new AttributeDesignatorType(); resourceDesignator.setAttributeId(XACMLUtils.RESOURCE_IDENTIFIER); resourceDesignator.setDataType(XACMLUtils.W3C_STRING); resourceMatch.setResourceAttributeDesignator(resourceDesignator); resourceMatch.setAttributeValue(resourceAttributeValue); resource.getResourceMatch().add(resourceMatch); resources.getResource().add(resource); policyTarget.setResources(resources); policy.setTarget(policyTarget); for (AccessControlEntry ace : accessControlList.getEntries()) { boolean allow = ace.isAllow(); RuleType rule = new RuleType(); rule.setRuleId(ace.getRole() + "_" + ace.getAction() + (allow ? "_Permit" : "_Deny")); if (allow) { rule.setEffect(EffectType.PERMIT); } else { rule.setEffect(EffectType.DENY); } TargetType target = new TargetType(); ActionsType actions = new ActionsType(); ActionType action = new ActionType(); ActionMatchType actionMatch = new ActionMatchType(); actionMatch.setMatchId(XACMLUtils.XACML_STRING_EQUAL); AttributeValueType attributeValue = new AttributeValueType(); attributeValue.setDataType(XACMLUtils.W3C_STRING); attributeValue.getContent().add(ace.getAction()); AttributeDesignatorType designator = new AttributeDesignatorType(); designator.setAttributeId(XACMLUtils.ACTION_IDENTIFIER); designator.setDataType(XACMLUtils.W3C_STRING); actionMatch.setActionAttributeDesignator(designator); actionMatch.setAttributeValue(attributeValue); action.getActionMatch().add(actionMatch); actions.getAction().add(action); target.setActions(actions); rule.setTarget(target); ConditionType condition = new ConditionType(); ApplyType apply = new ApplyType(); apply.setFunctionId(XACMLUtils.XACML_STRING_IS_IN); AttributeValueType conditionAttributeValue = new AttributeValueType(); conditionAttributeValue.setDataType(XACMLUtils.W3C_STRING); conditionAttributeValue.getContent().add(ace.getRole()); SubjectAttributeDesignatorType subjectDesignator = new SubjectAttributeDesignatorType(); subjectDesignator.setDataType(XACMLUtils.W3C_STRING); subjectDesignator.setAttributeId(XACMLUtils.SUBJECT_ROLE_IDENTIFIER); apply.getExpression().add(jbossXacmlObjectFactory.createAttributeValue(conditionAttributeValue)); apply.getExpression().add(jbossXacmlObjectFactory.createSubjectAttributeDesignator(subjectDesignator)); condition.setExpression(jbossXacmlObjectFactory.createApply(apply)); rule.setCondition(condition); policy.getCombinerParametersOrRuleCombinerParametersOrVariableDefinition().add(rule); } RuleType deny = new RuleType(); deny.setEffect(EffectType.DENY); deny.setRuleId("DenyRule"); policy.getCombinerParametersOrRuleCombinerParametersOrVariableDefinition().add(deny); StringWriter writer = new StringWriter(); XACMLUtils.jBossXacmlJaxbContext.createMarshaller().marshal(jbossXacmlObjectFactory.createPolicy(policy), writer); return writer.getBuffer().toString(); }
XACMLUtils { public static String getXacml(MediaPackage mediapackage, AccessControlList accessControlList) throws JAXBException { ObjectFactory jbossXacmlObjectFactory = new ObjectFactory(); PolicyType policy = new PolicyType(); policy.setPolicyId(mediapackage.getIdentifier().toString()); policy.setVersion("2.0"); policy.setRuleCombiningAlgId(XACMLUtils.RULE_COMBINING_ALG); TargetType policyTarget = new TargetType(); ResourcesType resources = new ResourcesType(); ResourceType resource = new ResourceType(); ResourceMatchType resourceMatch = new ResourceMatchType(); resourceMatch.setMatchId(XACMLUtils.XACML_STRING_EQUAL); AttributeValueType resourceAttributeValue = new AttributeValueType(); resourceAttributeValue.setDataType(XACMLUtils.W3C_STRING); resourceAttributeValue.getContent().add(mediapackage.getIdentifier().toString()); AttributeDesignatorType resourceDesignator = new AttributeDesignatorType(); resourceDesignator.setAttributeId(XACMLUtils.RESOURCE_IDENTIFIER); resourceDesignator.setDataType(XACMLUtils.W3C_STRING); resourceMatch.setResourceAttributeDesignator(resourceDesignator); resourceMatch.setAttributeValue(resourceAttributeValue); resource.getResourceMatch().add(resourceMatch); resources.getResource().add(resource); policyTarget.setResources(resources); policy.setTarget(policyTarget); for (AccessControlEntry ace : accessControlList.getEntries()) { boolean allow = ace.isAllow(); RuleType rule = new RuleType(); rule.setRuleId(ace.getRole() + "_" + ace.getAction() + (allow ? "_Permit" : "_Deny")); if (allow) { rule.setEffect(EffectType.PERMIT); } else { rule.setEffect(EffectType.DENY); } TargetType target = new TargetType(); ActionsType actions = new ActionsType(); ActionType action = new ActionType(); ActionMatchType actionMatch = new ActionMatchType(); actionMatch.setMatchId(XACMLUtils.XACML_STRING_EQUAL); AttributeValueType attributeValue = new AttributeValueType(); attributeValue.setDataType(XACMLUtils.W3C_STRING); attributeValue.getContent().add(ace.getAction()); AttributeDesignatorType designator = new AttributeDesignatorType(); designator.setAttributeId(XACMLUtils.ACTION_IDENTIFIER); designator.setDataType(XACMLUtils.W3C_STRING); actionMatch.setActionAttributeDesignator(designator); actionMatch.setAttributeValue(attributeValue); action.getActionMatch().add(actionMatch); actions.getAction().add(action); target.setActions(actions); rule.setTarget(target); ConditionType condition = new ConditionType(); ApplyType apply = new ApplyType(); apply.setFunctionId(XACMLUtils.XACML_STRING_IS_IN); AttributeValueType conditionAttributeValue = new AttributeValueType(); conditionAttributeValue.setDataType(XACMLUtils.W3C_STRING); conditionAttributeValue.getContent().add(ace.getRole()); SubjectAttributeDesignatorType subjectDesignator = new SubjectAttributeDesignatorType(); subjectDesignator.setDataType(XACMLUtils.W3C_STRING); subjectDesignator.setAttributeId(XACMLUtils.SUBJECT_ROLE_IDENTIFIER); apply.getExpression().add(jbossXacmlObjectFactory.createAttributeValue(conditionAttributeValue)); apply.getExpression().add(jbossXacmlObjectFactory.createSubjectAttributeDesignator(subjectDesignator)); condition.setExpression(jbossXacmlObjectFactory.createApply(apply)); rule.setCondition(condition); policy.getCombinerParametersOrRuleCombinerParametersOrVariableDefinition().add(rule); } RuleType deny = new RuleType(); deny.setEffect(EffectType.DENY); deny.setRuleId("DenyRule"); policy.getCombinerParametersOrRuleCombinerParametersOrVariableDefinition().add(deny); StringWriter writer = new StringWriter(); XACMLUtils.jBossXacmlJaxbContext.createMarshaller().marshal(jbossXacmlObjectFactory.createPolicy(policy), writer); return writer.getBuffer().toString(); } }
XACMLUtils { public static String getXacml(MediaPackage mediapackage, AccessControlList accessControlList) throws JAXBException { ObjectFactory jbossXacmlObjectFactory = new ObjectFactory(); PolicyType policy = new PolicyType(); policy.setPolicyId(mediapackage.getIdentifier().toString()); policy.setVersion("2.0"); policy.setRuleCombiningAlgId(XACMLUtils.RULE_COMBINING_ALG); TargetType policyTarget = new TargetType(); ResourcesType resources = new ResourcesType(); ResourceType resource = new ResourceType(); ResourceMatchType resourceMatch = new ResourceMatchType(); resourceMatch.setMatchId(XACMLUtils.XACML_STRING_EQUAL); AttributeValueType resourceAttributeValue = new AttributeValueType(); resourceAttributeValue.setDataType(XACMLUtils.W3C_STRING); resourceAttributeValue.getContent().add(mediapackage.getIdentifier().toString()); AttributeDesignatorType resourceDesignator = new AttributeDesignatorType(); resourceDesignator.setAttributeId(XACMLUtils.RESOURCE_IDENTIFIER); resourceDesignator.setDataType(XACMLUtils.W3C_STRING); resourceMatch.setResourceAttributeDesignator(resourceDesignator); resourceMatch.setAttributeValue(resourceAttributeValue); resource.getResourceMatch().add(resourceMatch); resources.getResource().add(resource); policyTarget.setResources(resources); policy.setTarget(policyTarget); for (AccessControlEntry ace : accessControlList.getEntries()) { boolean allow = ace.isAllow(); RuleType rule = new RuleType(); rule.setRuleId(ace.getRole() + "_" + ace.getAction() + (allow ? "_Permit" : "_Deny")); if (allow) { rule.setEffect(EffectType.PERMIT); } else { rule.setEffect(EffectType.DENY); } TargetType target = new TargetType(); ActionsType actions = new ActionsType(); ActionType action = new ActionType(); ActionMatchType actionMatch = new ActionMatchType(); actionMatch.setMatchId(XACMLUtils.XACML_STRING_EQUAL); AttributeValueType attributeValue = new AttributeValueType(); attributeValue.setDataType(XACMLUtils.W3C_STRING); attributeValue.getContent().add(ace.getAction()); AttributeDesignatorType designator = new AttributeDesignatorType(); designator.setAttributeId(XACMLUtils.ACTION_IDENTIFIER); designator.setDataType(XACMLUtils.W3C_STRING); actionMatch.setActionAttributeDesignator(designator); actionMatch.setAttributeValue(attributeValue); action.getActionMatch().add(actionMatch); actions.getAction().add(action); target.setActions(actions); rule.setTarget(target); ConditionType condition = new ConditionType(); ApplyType apply = new ApplyType(); apply.setFunctionId(XACMLUtils.XACML_STRING_IS_IN); AttributeValueType conditionAttributeValue = new AttributeValueType(); conditionAttributeValue.setDataType(XACMLUtils.W3C_STRING); conditionAttributeValue.getContent().add(ace.getRole()); SubjectAttributeDesignatorType subjectDesignator = new SubjectAttributeDesignatorType(); subjectDesignator.setDataType(XACMLUtils.W3C_STRING); subjectDesignator.setAttributeId(XACMLUtils.SUBJECT_ROLE_IDENTIFIER); apply.getExpression().add(jbossXacmlObjectFactory.createAttributeValue(conditionAttributeValue)); apply.getExpression().add(jbossXacmlObjectFactory.createSubjectAttributeDesignator(subjectDesignator)); condition.setExpression(jbossXacmlObjectFactory.createApply(apply)); rule.setCondition(condition); policy.getCombinerParametersOrRuleCombinerParametersOrVariableDefinition().add(rule); } RuleType deny = new RuleType(); deny.setEffect(EffectType.DENY); deny.setRuleId("DenyRule"); policy.getCombinerParametersOrRuleCombinerParametersOrVariableDefinition().add(deny); StringWriter writer = new StringWriter(); XACMLUtils.jBossXacmlJaxbContext.createMarshaller().marshal(jbossXacmlObjectFactory.createPolicy(policy), writer); return writer.getBuffer().toString(); } private  XACMLUtils(); }
XACMLUtils { public static String getXacml(MediaPackage mediapackage, AccessControlList accessControlList) throws JAXBException { ObjectFactory jbossXacmlObjectFactory = new ObjectFactory(); PolicyType policy = new PolicyType(); policy.setPolicyId(mediapackage.getIdentifier().toString()); policy.setVersion("2.0"); policy.setRuleCombiningAlgId(XACMLUtils.RULE_COMBINING_ALG); TargetType policyTarget = new TargetType(); ResourcesType resources = new ResourcesType(); ResourceType resource = new ResourceType(); ResourceMatchType resourceMatch = new ResourceMatchType(); resourceMatch.setMatchId(XACMLUtils.XACML_STRING_EQUAL); AttributeValueType resourceAttributeValue = new AttributeValueType(); resourceAttributeValue.setDataType(XACMLUtils.W3C_STRING); resourceAttributeValue.getContent().add(mediapackage.getIdentifier().toString()); AttributeDesignatorType resourceDesignator = new AttributeDesignatorType(); resourceDesignator.setAttributeId(XACMLUtils.RESOURCE_IDENTIFIER); resourceDesignator.setDataType(XACMLUtils.W3C_STRING); resourceMatch.setResourceAttributeDesignator(resourceDesignator); resourceMatch.setAttributeValue(resourceAttributeValue); resource.getResourceMatch().add(resourceMatch); resources.getResource().add(resource); policyTarget.setResources(resources); policy.setTarget(policyTarget); for (AccessControlEntry ace : accessControlList.getEntries()) { boolean allow = ace.isAllow(); RuleType rule = new RuleType(); rule.setRuleId(ace.getRole() + "_" + ace.getAction() + (allow ? "_Permit" : "_Deny")); if (allow) { rule.setEffect(EffectType.PERMIT); } else { rule.setEffect(EffectType.DENY); } TargetType target = new TargetType(); ActionsType actions = new ActionsType(); ActionType action = new ActionType(); ActionMatchType actionMatch = new ActionMatchType(); actionMatch.setMatchId(XACMLUtils.XACML_STRING_EQUAL); AttributeValueType attributeValue = new AttributeValueType(); attributeValue.setDataType(XACMLUtils.W3C_STRING); attributeValue.getContent().add(ace.getAction()); AttributeDesignatorType designator = new AttributeDesignatorType(); designator.setAttributeId(XACMLUtils.ACTION_IDENTIFIER); designator.setDataType(XACMLUtils.W3C_STRING); actionMatch.setActionAttributeDesignator(designator); actionMatch.setAttributeValue(attributeValue); action.getActionMatch().add(actionMatch); actions.getAction().add(action); target.setActions(actions); rule.setTarget(target); ConditionType condition = new ConditionType(); ApplyType apply = new ApplyType(); apply.setFunctionId(XACMLUtils.XACML_STRING_IS_IN); AttributeValueType conditionAttributeValue = new AttributeValueType(); conditionAttributeValue.setDataType(XACMLUtils.W3C_STRING); conditionAttributeValue.getContent().add(ace.getRole()); SubjectAttributeDesignatorType subjectDesignator = new SubjectAttributeDesignatorType(); subjectDesignator.setDataType(XACMLUtils.W3C_STRING); subjectDesignator.setAttributeId(XACMLUtils.SUBJECT_ROLE_IDENTIFIER); apply.getExpression().add(jbossXacmlObjectFactory.createAttributeValue(conditionAttributeValue)); apply.getExpression().add(jbossXacmlObjectFactory.createSubjectAttributeDesignator(subjectDesignator)); condition.setExpression(jbossXacmlObjectFactory.createApply(apply)); rule.setCondition(condition); policy.getCombinerParametersOrRuleCombinerParametersOrVariableDefinition().add(rule); } RuleType deny = new RuleType(); deny.setEffect(EffectType.DENY); deny.setRuleId("DenyRule"); policy.getCombinerParametersOrRuleCombinerParametersOrVariableDefinition().add(deny); StringWriter writer = new StringWriter(); XACMLUtils.jBossXacmlJaxbContext.createMarshaller().marshal(jbossXacmlObjectFactory.createPolicy(policy), writer); return writer.getBuffer().toString(); } private  XACMLUtils(); static AccessControlList parseXacml(InputStream xacml); static String getXacml(MediaPackage mediapackage, AccessControlList accessControlList); }
XACMLUtils { public static String getXacml(MediaPackage mediapackage, AccessControlList accessControlList) throws JAXBException { ObjectFactory jbossXacmlObjectFactory = new ObjectFactory(); PolicyType policy = new PolicyType(); policy.setPolicyId(mediapackage.getIdentifier().toString()); policy.setVersion("2.0"); policy.setRuleCombiningAlgId(XACMLUtils.RULE_COMBINING_ALG); TargetType policyTarget = new TargetType(); ResourcesType resources = new ResourcesType(); ResourceType resource = new ResourceType(); ResourceMatchType resourceMatch = new ResourceMatchType(); resourceMatch.setMatchId(XACMLUtils.XACML_STRING_EQUAL); AttributeValueType resourceAttributeValue = new AttributeValueType(); resourceAttributeValue.setDataType(XACMLUtils.W3C_STRING); resourceAttributeValue.getContent().add(mediapackage.getIdentifier().toString()); AttributeDesignatorType resourceDesignator = new AttributeDesignatorType(); resourceDesignator.setAttributeId(XACMLUtils.RESOURCE_IDENTIFIER); resourceDesignator.setDataType(XACMLUtils.W3C_STRING); resourceMatch.setResourceAttributeDesignator(resourceDesignator); resourceMatch.setAttributeValue(resourceAttributeValue); resource.getResourceMatch().add(resourceMatch); resources.getResource().add(resource); policyTarget.setResources(resources); policy.setTarget(policyTarget); for (AccessControlEntry ace : accessControlList.getEntries()) { boolean allow = ace.isAllow(); RuleType rule = new RuleType(); rule.setRuleId(ace.getRole() + "_" + ace.getAction() + (allow ? "_Permit" : "_Deny")); if (allow) { rule.setEffect(EffectType.PERMIT); } else { rule.setEffect(EffectType.DENY); } TargetType target = new TargetType(); ActionsType actions = new ActionsType(); ActionType action = new ActionType(); ActionMatchType actionMatch = new ActionMatchType(); actionMatch.setMatchId(XACMLUtils.XACML_STRING_EQUAL); AttributeValueType attributeValue = new AttributeValueType(); attributeValue.setDataType(XACMLUtils.W3C_STRING); attributeValue.getContent().add(ace.getAction()); AttributeDesignatorType designator = new AttributeDesignatorType(); designator.setAttributeId(XACMLUtils.ACTION_IDENTIFIER); designator.setDataType(XACMLUtils.W3C_STRING); actionMatch.setActionAttributeDesignator(designator); actionMatch.setAttributeValue(attributeValue); action.getActionMatch().add(actionMatch); actions.getAction().add(action); target.setActions(actions); rule.setTarget(target); ConditionType condition = new ConditionType(); ApplyType apply = new ApplyType(); apply.setFunctionId(XACMLUtils.XACML_STRING_IS_IN); AttributeValueType conditionAttributeValue = new AttributeValueType(); conditionAttributeValue.setDataType(XACMLUtils.W3C_STRING); conditionAttributeValue.getContent().add(ace.getRole()); SubjectAttributeDesignatorType subjectDesignator = new SubjectAttributeDesignatorType(); subjectDesignator.setDataType(XACMLUtils.W3C_STRING); subjectDesignator.setAttributeId(XACMLUtils.SUBJECT_ROLE_IDENTIFIER); apply.getExpression().add(jbossXacmlObjectFactory.createAttributeValue(conditionAttributeValue)); apply.getExpression().add(jbossXacmlObjectFactory.createSubjectAttributeDesignator(subjectDesignator)); condition.setExpression(jbossXacmlObjectFactory.createApply(apply)); rule.setCondition(condition); policy.getCombinerParametersOrRuleCombinerParametersOrVariableDefinition().add(rule); } RuleType deny = new RuleType(); deny.setEffect(EffectType.DENY); deny.setRuleId("DenyRule"); policy.getCombinerParametersOrRuleCombinerParametersOrVariableDefinition().add(deny); StringWriter writer = new StringWriter(); XACMLUtils.jBossXacmlJaxbContext.createMarshaller().marshal(jbossXacmlObjectFactory.createPolicy(policy), writer); return writer.getBuffer().toString(); } private  XACMLUtils(); static AccessControlList parseXacml(InputStream xacml); static String getXacml(MediaPackage mediapackage, AccessControlList accessControlList); static final String RULE_COMBINING_ALG; static final String ACTION_IDENTIFIER; static final String RESOURCE_IDENTIFIER; static final String SUBJECT_IDENTIFIER; static final String SUBJECT_ROLE_IDENTIFIER; static final String XACML_STRING_EQUAL; static final String XACML_STRING_IS_IN; static final String W3C_STRING; static final String ISSUER; }