summaryrefslogtreecommitdiffstats
path: root/docs/xacml
diff options
context:
space:
mode:
Diffstat (limited to 'docs/xacml')
-rw-r--r--docs/xacml/decision.guard.json2
-rw-r--r--docs/xacml/tutorial/decision.guard.response.json1
-rw-r--r--docs/xacml/xacml.rst5
3 files changed, 7 insertions, 1 deletions
diff --git a/docs/xacml/decision.guard.json b/docs/xacml/decision.guard.json
index ef1b5f65..9051c570 100644
--- a/docs/xacml/decision.guard.json
+++ b/docs/xacml/decision.guard.json
@@ -7,7 +7,7 @@
"resource": {
"guard": {
"actor": "SO",
- "recipe": "VF Module Create",
+ "operation": "VF Module Create",
"clname": "ControlLoop-vDNS-6f37f56d-a87d-4b85-b6a9-cc953cf779b3",
"target": "vLoadBalancer-00",
"vfCount": "1"
diff --git a/docs/xacml/tutorial/decision.guard.response.json b/docs/xacml/tutorial/decision.guard.response.json
new file mode 100644
index 00000000..24cc0d13
--- /dev/null
+++ b/docs/xacml/tutorial/decision.guard.response.json
@@ -0,0 +1 @@
+{"status":"Permit"} \ No newline at end of file
diff --git a/docs/xacml/xacml.rst b/docs/xacml/xacml.rst
index f129a017..4100e800 100644
--- a/docs/xacml/xacml.rst
+++ b/docs/xacml/xacml.rst
@@ -110,6 +110,11 @@ This is an example Decision API payload made to retrieve a decision for a Guard
.. literalinclude:: decision.guard.json
:language: JSON
+The return decision simply has "permit" or "deny" in the response to tell the calling application whether they are allowed to perform the operation.
+
+.. literalinclude:: decision.guard.response.json
+ :language: JSON
+
.. _xacml-optimization-label:
Optimization Policy Types