OGSA-DAI provides some policy information points (PIPs) that can be used within a Globus Toolkit authorization chain. These PIPs are listed here.
| PIP | Description |
|---|---|
| DN PIP | Obtains the distinguished name (DN) of the caller. |
| Resource ID PIP | Obtains the ID of the resource the request is targeted at. |
| Workflow Resource IDs PIP | Obtains the IDs of the resources targeted by activities in an OGSA-DAI workflow. |
The DN PIP obtains the distinguished name (DN) of the caller.
uk.org.ogsadai.service.gt.security.authorization.DNPIPMessageContext
object. The key
is uk.org.ogsadai.authz.DN
and the value is a String
containing the DN.
The Resource ID PIP obtains the ID of the resource the request is targeted at.
uk.org.ogsadai.service.gt.security.authorization.ResourceIDPIPMessageContext object. The key
is uk.org.ogsadai.authz.ResourceIDs
and the value is a java.util.Set.
Regardless of whether the property already existed or not the
resource ID is added to this set as a
uk.org.ogsadai.resource.ResourceID
object.
The Workflow Resource IDs PIP obtains the IDs of the resources targeted by activities in an OGSA-DAI workflow.
uk.org.ogsadai.service.gt.security.authorization.WorkflowResourceIDsPIPMessageContext. The key
is uk.org.ogsadai.authz.ResourceIDs
and the value is a java.util.Set.
Regardless of whether the property already existed or not the
the resource IDs are added to this set as
uk.org.ogsadai.resource.ResourceID
objects.