用于下载 XACML 3.0 权利的 REST API

Question

是否可以通过 REST API 下载所有（或部分）XACML 策略/权利？

Answer 1

Your question is very vague. You have to clarify.

XACML is a policy-based authorization solution. It does not maintain user entitlements directly per se. Instead of saying that Alice is a doctor and can do "viewMedicalRecord", a XACML policy states that

Doctors can view medical records

You then ask a Yes / No question eg

Can Alice view medical record #123?

Axiomatics provides 2 APIs (SOAP and REST) for that.

Reverse Querying

In addition to the binary approach, it is also possible to do a reverse query of the authorization policies. Rather than asking for a Yes/No question, you can ask:

What can Alice do?

This API would let you generate and download entitlements from a XACML API.

Answer 2

Here you can find the /entitlements-all REST API details

https://is.docs.wso2.com/en/latest/develop/entitlement-with-rest-apis/#get-all-entitlements