Question
Morgan Stanley
IN
Last activity: 15 Aug 2019 11:52 EDT
Purpose of Cross Origin Resource Sharing (CORS) rule in Pega 7.2.1
Whats the purpose of CORS rule and where exactly do we refer this rule..
I'm asking about the rule from which we refer this CORS rule.
Pegasystems Inc.
US
There is plenty of information about CORS on the Internet, e.g., https://en.wikipedia.org/wiki/Cross-origin_resource_sharing
Regarding Pega, see:
FYI: Further enhancements have been made to CORS in 8.3 which is getting closer to GA.
Morgan Stanley
IN
Thanks Lee. The links really helped.
However, i'm still unable to figure out where exactly these CORS rules needs to be referred in the application. Below is the statement from the help link you shared:
"After you create a CORS policy, you must map the CORS policy to an endpoint to determine where the policy is applied."
In which rule Connect REST/Service REST? where exactly we refer this rule
Pegasystems Inc.
IN
Designer Studio-->Integration-->Services-->EndPoint CORS Policy Mapping.
Here you need to add your endpoint and the CORS policy which you create/created.
Pegasystems Inc.
US
Security policies are either System-wide or Application-wide, Examples:
- Security Policy (password length, etc.)
- Content Security Policy
- Cross Origin Resource Sharing (CORS)
Attribute Based Access Control (ABAC) have Access Control Policy rules.
Role Based Access Control (RBAC) have Rule-Access-Role-Obj (RARO) rules.
You do not configure an Access Control Policy or a RARO against individual rules.
They are rules that Pega references to enforce security as you have defined it for an Application.