Question
Wirpo Technologies
AU
Last activity: 16 Apr 2019 12:58 EDT
ABAC is not working
We had below configuration. We mentioned here just demo classes instead of our own classes
We have work class
Myco-Appln-Work-Simple
- Level property single value integer(exposed)
Data-Admin-Operator-ID
- Level property single value integer(exposed)
We configure "Read" access control policy under "Myco-Appln-Work-Simple" class
We configure "CanReadSimpleCase" as access control policy configuration. It has below condition.
.Level <= OpeatorID.Level
Case1 created with Level 3 and Case2 created with Level 4. Operator has level 3. We are able to access Case2
Coforge DPA
GB
Hi
Can you confirm if the below condition a Access when rule or a Policy condition in "Access Control Policy Condition" rule?
.Level <= OpeatorID.Level
If it is not Access when,then put the condition in Access When rule and in Policy Condition give a condition which always returns false(.pyStatusWork IS EQUAL Never). This configuration should ideally work
Regards
Bhavya
Wirpo Technologies
AU
Hello Bavya,
Thanks for the quickest response. As per PDN, We created AccessControlPolicy and AccessControlPolicyCondition. We did not create "acces when" rule.
As per your latest comment,
Why should we need to create access when ? I hope this for role based control.
In Access Control Policy Condition rule, why should we need to put some condition which will always false.
What ever we created access when rule, where need to refer this "access control policy" or "access control policy condition"
Thanks
Alagar
Coforge DPA
GB
Hi Alagar
Let me answer you questions one by one.
*/
Why should we need to create access when ? I hope this for role based control. -> No this is not the case.
Have a look at below image:
The conditional logic will have "Access When" rules.
Specify a condition that always returns false to ensure that access is only provided if one of the access when rules evaluates to true.
Hi Alagar
Let me answer you questions one by one.
*/
Why should we need to create access when ? I hope this for role based control. -> No this is not the case.
Have a look at below image:
The conditional logic will have "Access When" rules.
Specify a condition that always returns false to ensure that access is only provided if one of the access when rules evaluates to true.
In the above image ExecutiveOfficer and SalesExecutive are Access When.
As you mentioned that if you give your condition in Policy condition it is not working. So just give it a try with above method.
Or else share the screenshot of your Access control Policy condition rule and then we can see.
Help link for your reference: https://community.pega.com/sites/default/files/help_v731/procomhelpmain.htm#security/ABAC/sec-create-ACPC-tsk.htm
Regards
Bhavya