Implement the "Deny-Overrides" algorithm. More...
#include <DenyOverridesAlg.h>
Public Member Functions | |
virtual Result | combine (EvaluationCtx *ctx, std::list< Policy * > policies) |
virtual const std::string & | getalgId (void) const |
Implement the "Deny-Overrides" algorithm.
Deny-Overrides, scans the policy set which is given as the parameters of "combine" method, if gets "deny" result from any policy, then stops scanning and gives "deny" as result, otherwise gives "permit".
virtual Result ArcSec::DenyOverridesCombiningAlg::combine | ( | EvaluationCtx * | ctx, | |
std::list< Policy * > | policies | |||
) | [virtual] |
If there is one policy which return negative evaluation result, then omit the other policies and return DECISION_DENY
ctx | This object contains request information which will be used to evaluated against policy. | |
policlies | This is a container which contains policy objects. |
Implements ArcSec::CombiningAlg.
virtual const std::string& ArcSec::DenyOverridesCombiningAlg::getalgId | ( | void | ) | const [inline, virtual] |
Get the identifier
Implements ArcSec::CombiningAlg.