/AWS1/CL_VPSISAUTHORIZEDOUTPUT¶
IsAuthorizedOutput
CONSTRUCTOR¶
IMPORTING¶
Required arguments:¶
iv_decision TYPE /AWS1/VPSDECISION /AWS1/VPSDECISION¶
An authorization decision that indicates if the authorization request should be allowed or denied.
it_determiningpolicies TYPE /AWS1/CL_VPSDETERMININGPLYITEM=>TT_DETERMININGPOLICYLIST TT_DETERMININGPOLICYLIST¶
The list of determining policies used to make the authorization decision. For example, if there are two matching policies, where one is a forbid and the other is a permit, then the forbid policy will be the determining policy. In the case of multiple matching permit policies then there would be multiple determining policies. In the case that no policies match, and hence the response is DENY, there would be no determining policies.
it_errors TYPE /AWS1/CL_VPSEVALERRORITEM=>TT_EVALUATIONERRORLIST TT_EVALUATIONERRORLIST¶
Errors that occurred while making an authorization decision, for example, a policy references an Entity or entity Attribute that does not exist in the slice.
Queryable Attributes¶
decision¶
An authorization decision that indicates if the authorization request should be allowed or denied.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_DECISION() |
Getter for DECISION, with configurable default |
ASK_DECISION() |
Getter for DECISION w/ exceptions if field has no value |
HAS_DECISION() |
Determine if DECISION has a value |
determiningPolicies¶
The list of determining policies used to make the authorization decision. For example, if there are two matching policies, where one is a forbid and the other is a permit, then the forbid policy will be the determining policy. In the case of multiple matching permit policies then there would be multiple determining policies. In the case that no policies match, and hence the response is DENY, there would be no determining policies.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_DETERMININGPOLICIES() |
Getter for DETERMININGPOLICIES, with configurable default |
ASK_DETERMININGPOLICIES() |
Getter for DETERMININGPOLICIES w/ exceptions if field has no |
HAS_DETERMININGPOLICIES() |
Determine if DETERMININGPOLICIES has a value |
errors¶
Errors that occurred while making an authorization decision, for example, a policy references an Entity or entity Attribute that does not exist in the slice.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ERRORS() |
Getter for ERRORS, with configurable default |
ASK_ERRORS() |
Getter for ERRORS w/ exceptions if field has no value |
HAS_ERRORS() |
Determine if ERRORS has a value |