Rules Editing and Namespaces

The Policy Manager administration User Interface allows you to create different types of objects:

Service rules

Role mapping policies

Internal user policies

Enforcement policies

Enforcement profiles

Post-audit rules

Proxy attribute pruning rules

Filters for Access Tracker and activity reports

Attributes editing for policy simulation

When editing all these elements, you are presented with a tabular interface with the same column headers:

Type: Type is the namespace from which these attributes are defined. This is a drop-down list that contains namespaces defined in the system for the current editing context.

Name: Name is the name of the attribute. This is a drop-down list with the names of the attributes present in the namespace.

Operator: Operator is a list of operators appropriate for the data type of the attribute. The drop-down list shows the operators appropriate for data type on the left (that is, the attribute).

Value: The value is the value of the attribute. Again, depending on the data type of the attribute, the value field can be a free-form one-line edit box, a free-form multi-line edit box, a drop-down list containing pre-defined values (enumerated types), or a time or date widget.

In some editing interfaces (for example, enforcement profile and policy simulation attribute editing interfaces) the operator does not change; it is always the EQUALS operator. Providing a uniform tabular interface to edit all these elements enables you to use the same steps while configuring these elements. Also, providing a context-sensitive editing experience (for names, operators and values) takes the guess-work out of configuring these elements.

The following sections describe namespaces, variables, and operators:

Namespaces

Variables

Operators