Note: this component stores cluster-wide configuration data and is mirrored across all servers in the topology within the the same cluster.
Note: changes to cluster-wide configuration objects are immediately and automatically mirrored across all servers within the same cluster, so offline changes are not supported.
Policy advice that can be used to add administrator-required filters to SCIM search queries. This advice provides a way to put restrictions on the resources that may be returned to an application that is otherwise allowed to use SCIM search requests. The filters specified by this advice will be AND'ed with any filter that is included in the SCIM request.
The payload for this advice is a string representing a valid SCIM filter. This filter may contain multiple clauses separated by AND or OR. If multiple instances of Add Filter Advice are returned from policy, they are AND'ed together to form a single filter that will be passed with the SCIM request. If the original SCIM request body also included a filter, that filter is AND'ed with the filter generated from policy to form the final filter value.
↓Parent Component
↓Properties
↓dsconfig Usage
The Add Filter Advice component inherits from the Advice
The properties supported by this managed object are as follows:
Basic Properties: | Advanced Properties: |
---|---|
↓ advice-id | None |
↓ decision-type | |
↓ evaluation-order-index |
Description | A unique identifier for the advice type. This ID must match the "code" string returned from a policy decision request. |
Default Value | add-filter |
Allowed Values | A string |
Multi-Valued | No |
Required | Yes |
Admin Action Required | None. Modification requires no further action |
Description | A value indicating to what type of decisions this advice should be applied. |
Default Value | PERMIT DENY |
Allowed Values | PERMIT - Only applied to PERMIT decisions. DENY - Only applied to DENY decisions. |
Multi-Valued | Yes |
Required | No |
Admin Action Required | None. Modification requires no further action |
evaluation-order-index (Read-Only)
Description | If multiple Advice are returned from a single policy request, then this property governs the order in which the Advice will be processed by the Policy Enforcement Point. Obligatory Advice are processed first. Within the set of obligatory or non-obligatory Advice, those with a smaller evaluation-order-index will be evaluated first. If multiple Advice have the same evaluation-order-index, then their order of evaluation is indeterminate. |
Default Value | 10 |
Allowed Values | An integer value. Lower limit is 0. |
Multi-Valued | No |
Required | No |
Admin Action Required | None. Modification requires no further action |
To list the configured Advice:
dsconfig list-advice [--property {propertyName}] ...
To view the configuration for an existing Advice:
dsconfig get-advice-prop --advice-name {name} [--tab-delimited] [--script-friendly] [--property {propertyName}] ...
To update the configuration for an existing Advice:
dsconfig set-advice-prop --advice-name {name} (--set|--add|--remove) {propertyName}:{propertyValue} [(--set|--add|--remove) {propertyName}:{propertyValue}] ...