Note: this component stores cluster-wide configuration data and is mirrored across all servers in the topology within the the same cluster.
Note: changes to cluster-wide configuration objects are immediately and automatically mirrored across all servers within the same cluster, so offline changes are not supported.
Policy Service contains the properties that affect the overall operation of the Data Governance Server policy service.
↓Relations from This Component
↓Properties
↓dsconfig Usage
The following components have a direct composition relation from Policy Services:
The properties supported by this managed object are as follows:
| Basic Properties: | Advanced Properties: |
|---|---|
| ↓ combining-algorithm | None |
| Description | The policy combining algorithm for the Policy Decision Point. |
| Default Value | deny-overrides |
| Allowed Values | deny-overrides - This combining algorithm is intended for those cases where a deny decision should have priority over a permit decision. permit-overrides - This combining algorithm is intended for those cases where a permit decision should have priority over a deny decision. deny-unless-permit - This combining algorithm is intended for those cases where a permit decision should have priority over a deny decision, and an "Indeterminate" or "NotApplicable" must never be the result. It is particularly useful at the top level in a policy structure to ensure that a PDP will always return a definite "Permit" or "Deny" result. permit-unless-deny - This combining algorithm is intended for those cases where a deny decision should have priority over a permit decision, and an "Indeterminate" or "NotApplicable" must never be the result. It is particularly useful at the top level in a policy structure to ensure that a PDP will always return a definite "Permit" or "Deny" result. |
| Multi-Valued | No |
| Required | No |
| Admin Action Required | The Data Governance Server must be restarted for changes to this setting to take effect. In order for this modification to take effect the server must be restarted |
To view the Policy Service configuration:
dsconfig get-policy-service-prop
[--tab-delimited]
[--script-friendly]
[--property {propertyName}] ...
To update the Policy Service configuration:
dsconfig set-policy-service-prop
(--set|--add|--remove) {propertyName}:{propertyValue}
[(--set|--add|--remove) {propertyName}:{propertyValue}] ...