...
This is still not understood. A question which illustrates this is “Do objects initialize/destroy their injected children or do they come preinitialized?”. The question is not important (since init and destroy can be called multiple times), but it illustrates that this design is not bottomed out. ACTION RDW ensure that there is a case in JIRA to capture this. STATUS: IDP-288 created.
The language
Significant discussion:
- Can we fix it - ? no.
- Can we think of a representation of a policy which makes this work easier and which the current language can be parsed into, leaving us the option of creating a better new language - May, possible but…
- When it comes to it the language works for the task and implementation difficulties are always trumped by ease of deployment.
FilterContext
check Check the annotations. It appears that getRequestedAttribute is missing @Unmodifiable, further it might need to be made so (if feasible). ACTION RDW Jira or fix. STATUS: Work will be done under case idp-287.
AttributeFilter
Questions about tristating and the use of MatcherException. Can we make tristate handling configurable? Answer: it is be better to configure the tristate away by effective PolicyRequirementRules and so the answer is what policy requirement rules are missing?
...
ACTIONS RDW make these things so. STATUS: Work will be tracked under case idp-287.
AttributeRule
Have we make this an interface and have Permit and Deny variants? There are three options
...