<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">My idea would be to use a MetadataFilter on all SP metadata from that source that adds a filter tag, and then have a filter rule that releases everything if that tag is present.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">users <users-bounces@shibboleth.net> on behalf of Bachl, Mathias via users <users@shibboleth.net><br>
<b>Date: </b>Friday, February 17, 2023 at 11:16 AM<br>
<b>To: </b>Cantor, Scott <cantor.2@osu.edu>, Shib Users <users@shibboleth.net><br>
<b>Cc: </b>Bachl, Mathias <mathias.bachl@brz.gv.at><br>
<b>Subject: </b>AW: Disable attribute filtering<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt">Hi,<br>
<br>
unfortunately AttributeFilterPolicy is a final class, not an interface :-(<br>
<br>
The only thing I can imagine using a custom-initiated AttributeFilterPolicy instance would be to dynamically generate a list of AttributeRules based on the attribute registry configuration - again a very hacky solution...<br>
<br>
Best regards,<br>
Mathias<br>
<br>
-----Ursprüngliche Nachricht-----<br>
Von: Cantor, Scott <cantor.2@osu.edu> <br>
Gesendet: Mittwoch, 15. Februar 2023 14:16<br>
An: Bachl, Mathias <mathias.bachl@brz.gv.at>; Shib Users <users@shibboleth.net><br>
Betreff: Re: Disable attribute filtering<br>
<br>
> I wouldn't mind implementing such a dummy filtering service, <br>
> AttributeFilter implementation or AttributeFilterServiceStrategy, but <br>
> I didn't find a way to replace the default implementations defined in services-system.xml...<br>
> Is there a way to do that?<br>
<br>
Probably only to a point with some of the services. The filter and resolver services happen to not define much of anything in their "system" resources, which gets automatically injected into the Spring context (in contrast to e.g. the relying-party resolver,
which has dozens of built-in beans defining part of the service).<br>
<br>
Replacing the existing filter policy file with a native Spring bean file that instantiated a custom built AttributeFilterPolicy-supporting object will cause the existing service to instantiate that bean or beans, pull out that implementation of the AttributeFilterPolicy
interface, and wrap the AttributeFilterServiceImpl class around it.<br>
<br>
Nothing stops a custom implementation of AttributeFilterPolicy from doing anything it wants to.<br>
<br>
You could also do all this with the existing filter syntax but only by authoring schema, writing Spring parsers, etc, which is largely pointless.<br>
<br>
There should be a more elegant way to replace services wholesale, but it's just not in enough demand.<br>
<br>
-- Scott<br>
<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://urldefense.com/v3/__https:/shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!IBzWLUs!RtrzOhxi3mOQNhCk1jacH6baE2b1rV4LJlmgOIrmyyFCgrW_sqnpbQmAEnzsliJITG_2CLmWCuHZz3hn$">
https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!IBzWLUs!RtrzOhxi3mOQNhCk1jacH6baE2b1rV4LJlmgOIrmyyFCgrW_sqnpbQmAEnzsliJITG_2CLmWCuHZz3hn$</a>
<br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<o:p></o:p></span></p>
</div>
</div>
</body>
</html>