wso2 / wso2/docs-apim

Need to fix documentation on the steps for configuring Role-Based Access Control (RBAC) using XACML

Open
#10,308 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Type/Bug
Dominant language
CSS
Stars
99
Forks
708
Avg merge
1d 7h
Merged PRs (30d)
22

Description

Description

Steps mentioned in documentation [1] does not work when APIM is to configure with WSO2 IS 6.1.0 or 7.x.

After creating the XACML policy in IS as described in the documentation, it does not work as expected. When using the try out feature, all test evaluations resulted in Deny.

Need to verify the steps given

[1] - https://apim.docs.wso2.com/en/latest/manage-apis/design/api-security/authorization/role-based-access-control-using-xacml/#!

Suggested Fix

N/A

Version(s)

4.5.0

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the linked RBAC/XACML documentation and reproduce its policy evaluation steps with WSO2 IS 6.1.0 and 7.x, using the API Manager 4.5.0 context described in the issue. Compare the documented configuration with the observed Deny results and update the steps so the try-out evaluations work as expected.

Written by the indexing model from the issue text.

Assessment

Domain
authorization, documentation
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.