Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. In the Resource Policies section, click Add New Resource Policy as shown below.
    add new resource policy
  2. You can define the following details in the resource policy as shown below.

    Resource policy conditionDescription
    Resource policy nameEnter a name for the new resource policy.
    DescriptionEnter a description for the new resource policy.
    Apply Throttling Tier

    Select the throttling tier. According to the tier you select, you are granted a maximum number of requests to the app. For information on throttling tiers, see Managing Throttling Tiers.

    Allow Anonymous AccessSelect True if you want to allow anonymous access on a specific Web app resource.
    Accessible User RolesTo add the user roles, which you want to allow to access a specific Web app resource, type the name of the user role and press the Enter key. For information on defining accessible user roles, see Web Application Resource Authorization.
    XACML PoliciesSelect a XACML policy out of the list of the defined policies.

     

     

  3. Enter a name for the XACML policy condition in the XACML policy editor (entitlement policy editor) as shown below.
  4. XACML is a widely used authorization mechanism for Web resources. You can add XACML-based resource policies to Web apps in WSO2 App Manager. 
    entitlement policy editor forXACML Image Removed
  5. Edit the content under the <Condition> property, or replace the default content template
  6. Select Share this checkbox if you want to share the policy with others.  When a policy is shared, it will be available in the XACML policy list of other new Web applications.
  7. Click Validate to check the validity of the policy. It checks for syntax errors and verifies whether the condition adheres with XACML policy language specifications. 
  8. Click Save to save the policy condition details, or click Save & Close to save the changes, and close the policy editor. When the policy is saved, it gets listed under XACML policies.
  9. You can edit and delete defined XACML policies using the provided buttons.

    InfoOnly the author of the policy can edit shared policies
    For more information on defining XACML policies, see Adding XACML Policies.
  10. For instructions on step 3 of the process of creating a Web app in App Manager, see Step 3 - Web Application Resources.