Best way to load XACML policy in Distributed PDP Environment

Question

Hi I am working with WSO2 Balana XACML and I found that that sample provided by wso2 they are loading policy file from resource folder. I don't want to load policy from the file system as i want to load it from the DB, or I will give the service URL their my PDP will go check for the policy for the incoming request , or is their any other way please suggest.

Answer 1

Yes you are correct. File based policy finder module is sample policy finder module that is shipped with by default. If you are really using Baana, you may need to use a policy finder that read policies from the database.

Policy finder is an extension point in the Balana, You can write any policy finder module that you wish. Please find the in-memory policy finder from here. You can extend it and write a new policy policy finder for database...