IdPv3 access control policies

[Cantor, Scott]

On 10/1/15, 9:42 AM, "users on behalf of Liam Hoekenga" <users-bounces at shibboleth.net on behalf of liamr at umich.edu> wrote:

>Is it possible to use multiple polices per admin flow in idpv3?

If you mean multiple ranges, sure. I believe there's only one named policy per function.

I need to review that code, in hindsight I'm not sure why I felt the need to define a whole API for that vs. just using the same condition approach everything else uses. Seems dumb to me but I'm not in that head space at the moment so I'm probably missing something. I think it was an overreaction to the goal of reloading the policies at runtime, but I probably went overboard.

At minimum, it makes boolean logic a pain since there's nothing defined for that. I can build some adapters to the Predicate interface. Should do a Scripted plugin also.

-- Scott