Download presentation
Presentation is loading. Please wait.
1
Right Object Groups February, 2019
2
Problem Delegation very popular
Ability to restrict rights on delegation Enumerating every object can be impractical Often too many objects to list conveniently Objects are often already grouped
3
Problem Example <RequestMessage> … <Operation type="Enumeration" value="DelegatedLogin"/> … <Rights> <Right> <Objects> <UniqueIdentifier type="TextString" value="0123-ABCDEF …"/> <UniqueIdentifier type="TextString" value=" …"/> <UniqueIdentifier type="TextString" value="2345-ABCDEF…"/> <UniqueIdentifier type="TextString" value=" …"/> <UniqueIdentifier type="TextString" value="4567-ABCDEF…"/> <UniqueIdentifier type="TextString" value=" …"/> <UniqueIdentifier type="TextString" value="6789-ABCDEF…"/> <UniqueIdentifier type="TextString" value=" …"/> <UniqueIdentifier type="TextString" value="8901-ABCDEF…"/> <UniqueIdentifier type="TextString" value=" …"/> </>….
4
Solution Allow groups of objects to be specified
Utilize existing object grouping mechanism Object Group has been present since KMIP-1.0
5
Solution Example <RequestMessage> … <Operation type="Enumeration" value="DelegatedLogin"/> … <Rights> <Right> <ObjectGroups> <ObjectGroup type="TextString" value="RedKeys"/> <ObjectGroup type="TextString" value="BlueKeys"/> </ObjectGroups> …. </>….
6
Conclusion Simplify specification delegations
Use existing grouping concepts
Similar presentations
© 2025 SlidePlayer.com. Inc.
All rights reserved.