...
- finding the nearest real node for a given the path, since access checks are sometimes performed on new nodes before they are added.
- Then you find the nearest parent with a policy property.
- Then you read in and return the policy XACML. (There is a PolicyReader class you can use here)
- It will also need to support requests for policies by node URI, i.e. resolving policies that are linked from the first policy.
ResourceFinder
...
AttributeFinderModule(s)
Attribute finder modules do not work the same as policy finder modules. The AttributeLocator is an implementation of the AttributeFinderModule interface. So only one class is needed per function.
SubjectAttributeFinderModule
...