System Administrator’s Guide

Managing the Policy Service

The following section describes how to manage the Policy Service:

Introduction

The Policy Service is responsible for the provisioning of rules into the rules engine. The rules engine can perform some of the policy evaluation of requests flowing through Network Gatekeeper. The Policy Service uses rules written in the policy evaluation language IRL, the Ilog Rules Language. The rules operate on data originating in the requests.

Management of the Policy Service mainly involves loading and deleting rules.

A rule file has an ID, that is given when it is loaded into persistent storage. Rule evaluation is performed if this ID corresponds to the plug-in type associated with the request. If there is no match the rule file with the ID DEFAULT is used. Rules exists on two levels, service provider- and application level.

The rules are enforced by a service interceptor, EvaluateILOGPolicy.

Configuration workflow

No configuration is necessary.

Reference: Attributes and Operations for PolicyService

Managed object: Container ServicesPolicyService

MBean: com.bea.wlcp.wlng.policy.PolicyServiceMBean

Below is a list of attributes and operations for configuration and maintenance.

Operation: deleteApplicationRuleFile

Deletes a rule file on the application group level.

Signature:

deleteApplicationRuleFile(serviceName: String)

Operation: deleteServiceProviderRuleFile

Deletes a rule file on the service provider group level.

Signature:

deleteServiceProviderRuleFile(serviceName: String)

Operation: listApplicationRuleFiles

Displays the IDs of all application group rule files.

Signature:

listApplicationRuleFiles()

Operation: listServiceProviderRuleFiles

Displays the IDs of all service provider group rule files.

Signature:

listServiceProviderRuleFiles()

Operation: loadApplicationRules

Loads a rule file on the application group level.

Signature:

loadApplicationRules(serviceName: String)

Operation: loadServiceProviderRules

Loads a rule file on the service provider group level.

Signature:

loadServiceProviderRules(serviceName: String)

Operation: viewApplicationRuleFile

Displays the contents of a rule file on the application group level.

Signature:

viewApplicationRuleFile(serviceName: String)

Operation: viewServiceProviderRuleFile

Displays the contents of a rule file on the service provider group level.

Signature:

viewServiceProviderRuleFile(serviceName: String)