Information source of ABAC PAP

Question

对于我没有找到明确答案的ABAC，这可能是一个非常基本的问题.PAP用于创建XACML策略文档的软件项目工件（例如需求规范）是什么？

Answer 1

The XACML standard and ABAC do not specify how to author policies. The Policy Administration Point (PAP) is out of scope of the specification.

From a technical standpoint, in Java, the easiest way to generate XACML policies is to use JAXB againt the XACML 3.0 schemas. This will give you a set of Java objects with which you can generate XACML policies. Other languages have similar techniques.

From a user experience perspective, you need to think about the policy authoring experience: how do you want to create policies? How do you want users to collaborate? Store policies? Deploy policies? Etc...

This is where different implementations (open-source eg ATT XACML or commercial eg Axiomatics) come into play. They offer different alternatives to author policies.

ALFA is also an interesting approach although it is not graphical but rather integrates with Eclipse.