Package org.keycloak.authorization.policy.provider
package org.keycloak.authorization.policy.provider
Provides classes and a SPI to plug different policy providers.
- Author:
- Pedro Igor
-
ClassDescription
PolicyProvidertypes can implement this interface if they support to partially evaluate the permissions that should apply to a given subject, aUserModel, when calculating the realm resources they have access in the context of theProfile.Feature.ADMIN_FINE_GRAINED_AUTHZfeature.If a realm has theProfile.Feature.ADMIN_FINE_GRAINED_AUTHZfeature enabled, realm resources storage providers can implement this interface if they want to apply custom predicates to queries to filter their results based on the permissions available from the realm.AnPartialEvaluationStorageProvider.EvaluationContextinstance provides access to contextual information when building a query for realm resources of a givenResourceType.