protect orion

[fernandorr21]

Hello, I am Fernando.
I have a stage with keyrock, authzforce and wilma. I want to make the creation of entities safe depending on the values ​​of the attributes of those entities. If for example the email attribute, email = fernando, I want the entity to be created, in case it does not have the value fernando is not created. With Authzforce the attributes of the entities are not captured, with Wilma is it possible to allow this?

[jason-fox]

There is an existing stub to do this called custom_policy ( I have not used this)

config.authorization = {
  enabled: false,
  pdp: 'idm', // idm|authzforce
  azf: {
    protocol: 'http',
    host: 'localhost',
    port: 8080,
    custom_policy: undefined, // use undefined to default policy checks (HTTP verb + path).
  },
};

You'd write the code to create the Authzforce request based on the custom_policy.js.template and need to change custom_policy from undefined to point to the new file.