Note: this component is designated "advanced", which means that objects of this type are not expected to be created or altered in most environments. If you believe that such a change is necessary, you may want to contact support in order to understand the potential impact of that change.
Note: this is an abstract component that cannot be instantiated.
Note: this component stores cluster-wide configuration data and is mirrored across all servers in the topology within the the same cluster.
Note: changes to cluster-wide configuration objects are immediately and automatically mirrored across all servers within the same cluster, so offline changes are not supported.
Provider which calculates the impactedAttributes property to be passed to the PDP for calls which modify a resource.
When a request is made to a client API which would modify a resource, an attribute called impactedAttributes is generated, containing the set of attributes of the resource that will be modified. This is then used by policy to ensure that users are unable to modify attributes for which they do not have permission (as determined by e.g. the scopes of their access token). The Impacted Attributes Provider takes a request and, if necessary, calculates this attribute.
↓Direct Subcomponents
↓Relations to This Component
↓Properties
↓dsconfig Usage
The following Impacted Attributes Providers are available in the server :
These Impacted Attributes Providers inherit from the properties described below.
The properties supported by this managed object are as follows:
| Basic Properties: | Advanced Properties: |
|---|---|
| ↓ enabled | None |
| Description | Indicates whether this Impacted Attributes Provider is enabled for use in PingAuthorize Server. |
| Default Value | None |
| Allowed Values | true false |
| Multi-Valued | No |
| Required | Yes |
| Admin Action Required | None. Modification requires no further action |
To list the configured Impacted Attributes Providers:
dsconfig list-impacted-attributes-providers
[--property {propertyName}] ...
To view the configuration for an existing Impacted Attributes Provider:
dsconfig get-impacted-attributes-provider-prop
--provider-name {name}
[--tab-delimited]
[--script-friendly]
[--property {propertyName}] ...
To update the configuration for an existing Impacted Attributes Provider:
dsconfig set-impacted-attributes-provider-prop
--provider-name {name}
(--set|--add|--remove) {propertyName}:{propertyValue}
[(--set|--add|--remove) {propertyName}:{propertyValue}] ...
To delete an existing Impacted Attributes Provider:
dsconfig delete-impacted-attributes-provider
--provider-name {name}