如何在wso2身份服务器中对自己创建的数据库实施xacml策略？

Question

I just started using wso2 identity server. I want to know how can we manage self created database through an WSO2 identity server and can we apply xacml policies created using WSO2 tryit tool on that database? How can it be done? Any help would be appreciated. Thank you. Regards

Answer 1

As far as I know, WSO2 IS cannot be used to secure databases. Have a look at the Data Access Filter instead.

What the Data Access Filter does is:

1. it lets you create XACML policies eg managers can view transactions in their branch.
2. it intercepts SQL traffic going to the database eg SELECT * FROM transactions and determines the end user's identity and branch eg Alice in Charlotte .
3. it modifies the SQL statement according to the policy eg SELECT * FROM transactions WHERE branch='Charlotte'
4. It forwards the modified statement to the backend database so that only entitled data is retrieved.

This lets you do dynamic data filtering and dynamic data masking.