Subject

Enforcer provides the following categories of Oasis attributes accessible from ALFA. These attributes can be used as part of an expression inside a policy.

• Resource Attributes
• Action Attributes
• Environment Attributes
• Subject Attributes
• Http Attributes

To make use of these attributes from inside an ALFA file, use the appropriate import statement:

import Oasis.Attributes
import Enforcer.Attributes

These attributes and their properties are also available in .Net code under the Rsk.Enforcer namespace.

using Rsk.Enforcer;

// Usage
Oasis.Attributes.Resource.Id; // "Resource"

Subject Attributes

Identifier

Namespace : Oasis.Attributes.Subject

attribute Identifier 
{ 
    id = "sub" 
    category = subjectCat 
    type = string 
}

Role

Namespace : Oasis.Attributes.Subject

attribute Role 
{ 
    id = "role" 
    category = subjectCat 
    type = string 
}

Email

Namespace : Oasis.Attributes.Subject

attribute Email 
{ 
    id = "email" 
    category = subjectCat 
    type = string
}

Name

Namespace : Oasis.Attributes.Subject

attribute Name 
{ 
    id = "name" 
    category = subjectCat 
    type = string 
}

Given Name

Namespace : Oasis.Attributes.Subject

attribute GivenName 
{ 
    id = "given_name" 
    category = subjectCat 
    type = string 
}

Family Name

Namespace : Oasis.Attributes.Subject

attribute FamilyName 
{ 
    id = "family_name" 
    category = subjectCat 
    type = string 
}

Gender

Namespace : Oasis.Attributes.Subject

attribute Gender 
{ 
    id = "gender" 
    category = subjectCat 
    type = string 
}

Date of Birth

Namespace : Oasis.Attributes.Subject

attribute DateOfBirth 
{ 
    id = "birthdate" 
    category = subjectCat 
    type = date 
}