Beaaqualogic Enterprise Security™®

Total Page：16

File Type：pdf, Size：1020Kb

BEAAquaLogic Enterprise Security™® Policy Managers Guide Version 2.6 Document Revised: April 2007 Contents 1. Introduction Document Scope and Audience. 1-1 Guide to this Document. 1-2 Related Documentation . 1-2 Contact Us! . 1-3 2. Security Policies Overview What is an AquaLogic Enterprise Security Policy? . 2-1 Closed-world Security Environment . 2-2 Policy Components . 2-3 Resources. 2-4 Virtual Resources . 2-6 Resource Attributes . 2-6 Privilege Groups. 2-6 Privileges . 2-6 Identities . 2-7 Identity Attributes. 2-8 Groups . 2-8 Users. 2-9 Roles. 2-10 Policies. 2-10 Role Mapping Policies . 2-10 Authorization Policies . 2-12 Delegation Policies. 2-13 Summary of Policy Differences . 2-14 Policy Managers Guide v Declarations. 2-14 Constants . 2-15 Enumerated Types . 2-15 Attributes . 2-15 Evaluation Functions . 2-15 3. Writing Policies Policy Implementation: Main Steps . 3-1 Access Decision Process . 3-4 Authentication Service. 3-4 Role Mapping Service . 3-4 Authorization Service . 3-5 Credential Mapping Service. 3-5 Authorization and Role Mapping Engine . 3-5 Using the Administration Console to Write Policies . 3-7 Administration Console Overview. 3-7 Defining Resources . 3-8 Virtual Resources . 3-11 Resource Attributes. 3-12 Privileges . 3-12 Privilege Groups . 3-13 Defining Identities . 3-14 Identity Attributes . 3-16 Groups. 3-16 Users . 3-17 Roles . 3-18 Writing Authorization and Role Mapping Policies . 3-19 Role Mapping Policies . 3-20 vi Policy Managers Guide Authorization Policies. 3-20 Role Mapping Policy Reports . 3-21 Authorization Policy Reports . 3-21 Defining Declarations. 3-22 Binding Policies . 3-23 Deploying Policies . 3-23 4. Advanced Topics Designing More Advanced Policies . 4-1 Multiple Components . 4-2 Policy Constraints. 4-2 Comparison Operators. 4-4 Regular Expressions . 4-4 Constraint Sets. 4-6 String Comparisons . 4-7 Boolean Operators. 4-8 Associativity and Precedence . 4-9 Grouping with Parentheses . 4-9 Boolean Operators and Constraint Sets. 4-10 Declarations . 4-11 Constant Declarations . 4-12 Enumerated Type Declarations . 4-14 Attribute Declarations . 4-15 Evaluation Function Declarations . 4-22.

218

Copy Link

Recommended publications

5. Data Types
IEEE FOR THE FUNCTIONAL VERIFICATION LANGUAGE e Std 1647-2011 5. Data types The e language has a number of predefined data types, including the integer and Boolean scalar types common to most programming languages. In addition, new scalar data types (enumerated types) that are appropriate for programming, modeling hardware, and interfacing with hardware simulators can be created. The e language also provides a powerful mechanism for defining OO hierarchical data structures (structs) and ordered collections of elements of the same type (lists). The following subclauses provide a basic explanation of e data types. 5.1 e data types Most e expressions have an explicit data type, as follows: — Scalar types — Scalar subtypes — Enumerated scalar types — Casting of enumerated types in comparisons — Struct types — Struct subtypes — Referencing fields in when constructs — List types — The set type — The string type — The real type — The external_pointer type — The “untyped” pseudo type Certain expressions, such as HDL objects, have no explicit data type. See 5.2 for information on how these expressions are handled. 5.1.1 Scalar types Scalar types in e are one of the following: numeric, Boolean, or enumerated. Table 17 shows the predefined numeric and Boolean types. Both signed and unsigned integers can be of any size and, thus, of any range. See 5.1.2 for information on how to specify the size and range of a scalar field or variable explicitly. See also Clause 4. 5.1.2 Scalar subtypes A scalar subtype can be named and created by using a scalar modifier to specify the range or bit width of a scalar type.
[Show full text]
Chapter 5: Substitutes for C Constructs
CHAPTER 5 Substitutes for C Constructs THE Java programming language shares many similarities with the C program- ming language, but several C constructs have been omitted. In most cases, it’s obvi- ous why a C construct was omitted and how to make do without it. This chapter suggests replacements for several omitted C constructs whose replacements are not so obvious. The common thread that connects the items in this chapter is that all of the omitted constructs are data-oriented rather than object-oriented. The Java pro- gramming language provides a powerful type system, and the suggested replace- ments take full advantage of that type system to deliver a higher quality abstraction than the C constructs they replace. Even if you choose to skip this chapter, it’s probably worth reading Item 21, which discusses the typesafe enum pattern, a replacement for C’s enum construct. This pattern is not widely known at the time of this writing, and it has several advan- tages over the methods currently in common use. Item 19: Replace structures with classes The C struct construct was omitted from the Java programming language because a class does everything a structure does and more. A structure merely groups multi- ple data fields into a single object; a class associates operations with the resulting object and allows the data fields to be hidden from users of the object. In other words, a class can encapsulate its data into an object that is accessed solely by its methods, allowing the implementor the freedom to change the representation over time (Item 12).
[Show full text]
Data Types Enumerated Types
CS 1044 Intro Programming in C++ Fall 2002 August 22, 2002 Data Types 9. Types 1 data type: a collection of values and the definition of one or more operations that can be performed on those values C++ includes a variety of built-in or base data types: short, int, long, float, double, char, etc. The values are ordered and atomic. C++ supports several mechanisms for aggregate data types: arrays, structures, classes. These allow complex combinations of other types as single entities. C++ also supports other mechanisms that allow programmers to define their own custom data types: enum types and typedefs. Computer Science Dept Va Tech August, 2002 Intro Programming in C++ ©1995-2002 Barnette ND & McQuain WD Enumerated Types 9. Types 2 An enumerated type is defined by giving a name for the type and then giving a list of labels, which are the only values that a variable of that type is allowed to have. Enumerated types allow the creation of specialized types that support the use of meaningful labels within a program. They promote code readability with very little overhead in memory or runtime cost. enum Month {JAN, FEB, MAR, APR, MAY, JUN, JUL, AUG, SEP, OCT, NOV, DEC}; enum Season {WINTER, SPRING, SUMMER, FALL}; enum Hemisphere {NORTH, SOUTH, EAST, WEST}; Month Mon; Season Period; Hemisphere Region; ... if (Mon == JAN && Region == NORTH) Period = WINTER; An enumerated type is allowed to have up to 256 values and a variable of an enumerated type will occupy one byte of memory. It is an error for the same label to be listed as a value for two different enumerated types.
[Show full text]
Object-Oriented Enumerated Type Facility
Europäisches Patentamt *EP001400895A2* (19) European Patent Office Office européen des brevets (11) EP 1 400 895 A2 (12) EUROPEAN PATENT APPLICATION (43) Date of publication: (51) Int Cl.7: G06F 9/44 24.03.2004 Bulletin 2004/13 (21) Application number: 03255511.2 (22) Date of filing: 03.09.2003 (84) Designated Contracting States: (72) Inventors: AT BE BG CH CY CZ DE DK EE ES FI FR GB GR • Bloch, Joshua J. HU IE IT LI LU MC NL PT RO SE SI SK TR San José, CA 95129 (US) Designated Extension States: • Gafter, Neal M. AL LT LV MK San José, CA 95129 (US) (30) Priority: 09.09.2002 US 237941 (74) Representative: Davies, Simon Robert D Young & Co, (71) Applicant: Sun Microsystems, Inc. 21 New Fetter Lane Santa Clara, California 95054 (US) London, EC4A 1DA (GB) (54) Object-oriented enumerated type facility (57) A system and method are provided that facili- tate use of an object-oriented enumerated type within a computer program. During operation, the system re- ceives source code for the computer program. The source code contains a declaration for an enumerated type. This declaration specifies a fixed number of enu- meration constants that comprise the enumerated type. Next, the system defines the enumerated type using a class defined within an object-oriented programming language. The class includes a constant for each enu- meration constant specified in the declaration. If the declaration additionally contains one or more method declarations, these methods are present on the defined class. EP 1 400 895 A2 Printed by Jouve, 75001 PARIS (FR) EP 1 400 895 A2 Description Field of the Invention 5 [0001] The present invention relates to computer systems and to programming languages, and more specifically, to a method and an apparatus for facilitating the use of an object-oriented enumerated type within a programming lan- guage.
[Show full text]
Enumerated Types
Enumerated Types CSE160, Computer Science A: Honors Stony Brook University http://www.cs.stonybrook.edu/~cse160 1 Enumerated Types An enumerated type defines a list of enumerated values Each value is an identifier enum Day{SUNDAY, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY}; enum TrafficLight { RED, GREEN, YELLOW } A value of an enumerated type is like a constant and so, by convention, is spelled with all uppercase letters Also, by convention, an enumerated type is named like a class with first letter of each word capitalized Once a type is defined, you can declare a variable of that type: Day day; TrafficLight t; The variable day can hold one of the values defined in the enumerated type Day or null, but nothing else 2 (c) Pearson Education, Inc. & Paul Fodor (CS Stony Brook) Enumerated Types The enumerated values can be accessed using the syntax EnumeratedTypeName.valueName For example, the following statement assigns enumerated value Monday to variable day: Day day = Day.MONDAY; Using enumerated values (e.g., Day.MONDAY) rather than literal integer values (e.g., 0, 1, 2, 3, and so on) can make program easier to read and maintain An enumerated type is treated as a special class, so an enumerated type variable is therefore a reference variable An enumerated type is a subtype of the Object class (inherits all the methods in the Object class) and the Comparable interface (has the compareTo method in the Comparable interface) 3 (c) Pearson Education, Inc. & Paul Fodor (CS Stony Brook) Enumerated Types The following methods are defined for any enumerated object: public String name(); Returns a name of the value for the object (e.g.
[Show full text]
Software II: Principles of Programming Languages
Software II: Principles of Programming Languages Lecture 6 – Data Types Some Basic Definitions • A data type defines a collection of data objects and a set of predefined operations on those objects • A descriptor is the collection of the attributes of a variable • An object represents an instance of a user- defined (abstract data) type • One design issue for all data types: What operations are defined and how are they specified? Primitive Data Types • Almost all programming languages provide a set of primitive data types • Primitive data types: Those not defined in terms of other data types • Some primitive data types are merely reflections of the hardware • Others require only a little non-hardware support for their implementation The Integer Data Type • Almost always an exact reflection of the hardware so the mapping is trivial • There may be as many as eight different integer types in a language • Java’s signed integer sizes: byte , short , int , long The Floating Point Data Type • Model real numbers, but only as approximations • Languages for scientific use support at least two floating-point types (e.g., float and double ; sometimes more • Usually exactly like the hardware, but not always • IEEE Floating-Point Standard 754 Complex Data Type • Some languages support a complex type, e.g., C99, Fortran, and Python • Each value consists of two floats, the real part and the imaginary part • Literal form real component – (in Fortran: (7, 3) imaginary – (in Python): (7 + 3j) component The Decimal Data Type • For business applications (money)
[Show full text]
C++ DATA TYPES Rialspo Int.Co M/Cplusplus/Cpp Data Types.Htm Copyrig Ht © Tutorialspoint.Com
C++ DATA TYPES http://www.tuto rialspo int.co m/cplusplus/cpp_data_types.htm Copyrig ht © tutorialspoint.com While doing prog ramming in any prog ramming lang uag e, you need to use various variables to store various information. Variables are nothing but reserved memory locations to store values. This means that when you create a variable you reserve some space in memory. You may like to store information of various data types like character, wide character, integ er, floating point, double floating point, boolean etc. Based on the data type of a variable, the operating system allocates memory and decides what can be stored in the reserved memory. Primitive Built-in Types: C++ offer the prog rammer a rich assortment of built-in as well as user defined data types. Following table lists down seven basic C++ data types: Type Keyword Boolean bool Character char Integ er int Floating point float Double floating point double Valueless void Wide character wchar_t Several of the basic types can be modified using one or more of these type modifiers: sig ned unsig ned short long The following table shows the variable type, how much memory it takes to store the value in memory, and what is maximum and minimum vaue which can be stored in such type of variables. Type Typical Bit Width Typical Rang e char 1byte -127 to 127 or 0 to 255 unsig ned char 1byte 0 to 255 sig ned char 1byte -127 to 127 int 4bytes -2147483648 to 2147483647 unsig ned int 4bytes 0 to 4294967295 sig ned int 4bytes -2147483648 to 2147483647 short int 2bytes -32768 to 32767 unsig ned short int Rang e 0 to 65,535 sig ned short int Rang e -32768 to 32767 long int 4bytes -2,147,483,647 to 2,147,483,647 sig ned long int 4bytes same as long int unsig ned long int 4bytes 0 to 4,294,967,295 float 4bytes +/- 3.4e +/- 38 (~7 dig its) double 8bytes +/- 1.7e +/- 308 (~15 dig its) long double 8bytes +/- 1.7e +/- 308 (~15 dig its) wchar_t 2 or 4 bytes 1 wide character The sizes of variables mig ht be different from those shown in the above table, depending on the compiler and the computer you are using .
[Show full text]
4 Data Types
4 Data Types VHDL is a strongly typed language. Every constant, signal, variable, function, and parameter is declared with a type, such as BOOLEAN or INTEGER, and can hold or return only a value of that type. VHDL predefines abstract data types, such as BOOLEAN, which are part of most programming languages, and hardware-re- lated types, such as BIT, found in most hardware languages. VHDL predefined types are declared in the STANDARD pack- age, which is supplied with all VHDL implementations (see Example 4–14). Data types addresses information about Enumeration Types Enumeration Overloading Enumeration Encoding Integer Types Array Types Record Types Predefined VHDL Data Types HOME CONTENTS INDEX For further assistance, email [email protected] or call your local support center V3.4 VHDL Compiler Reference Unsupported Data Types Synopsys Data Types Subtypes The advantage of strong typing is that VHDL tools can catch many common design errors, such as assigning an eight-bit value to a four-bit-wide signal, or incrementing an array index out of its range. The following code shows the definition of a new type, BYTE, as an array of eight bits, and a variable declaration, ADDEND, that uses this type. type BYTE is array(7 downto 0) of BIT; variable ADDEND: BYTE; The predefined VHDL data types are built from the basic VHDL data types. Some VHDL types are not supported for synthesis, such as REAL and FILE. The examples in this chapter show type definitions and associated object declarations. Although each constant, signal, variable, function, and parameter is declared with a type, only variable and signal declarations are shown here in the examples.
[Show full text]
Standard Gotchas: Subleties in the Verilog and Systemverilog
Standard Gotchas Subtleties in the Verilog and SystemVerilog Standards That Every Engineer Should Know! Stuart Sutherland Don Mills Sutherland HDL, Inc. Microchip Portland, Oregon Chandler, Arizona [email protected] [email protected] Don Mills, Microchip Stu Sutherland Presentation Overview Sutherland training engineers HD to be SystemVerilog Wizards L What is a “gotcha”? Why do standards have gotchas? What’s covered in this paper Several example gotchas, and how to avoid them! Summary 2of 20 Don Mills, Microchip Stu Sutherland What Is A Gotcha? Sutherland training engineers HD to be SystemVerilog Wizards L In programming, a “gotcha” is a legal language construct that does not do what the designer expects A Classic C programming Gotcha... Gotcha! if (day = 15) IfIf middlemiddle ofof thethe month,month, thenthen paypay employees…employees… /* process payroll */ GOTCHA!GOTCHA!This This codecode willwill assignassign thethe valuevalue ofof 1515 toto day,day, andand thenthen ifif dayday isis notnot zero,zero, paypay thethe employeesemployees In hardware design and verification, most gotchas will simulate, but give undesired results Gotchas can be difficult to find and debug A gotcha can be disastrous if not found before tape-out! Engineers need to know how to recognize and avoid gotchas in hardware modeling! 3of 20 Don Mills, Microchip Why Do Stu Sutherland Sutherland Standards Have Gotchas? training engineers HD to be SystemVerilog Wizards L Standards developers are idiots Users of standards are idiots Languages
[Show full text]
Enum in C Programming Examples
Enum In C Programming Examples Arterial or suspicionless, Sayre never expeditates any roturiers! Bird's-eye and unvarnished Henderson slacklymonophthongizes when prevenient his pituris Moss poeticizes enamellings elaborates aslant andsleazily. disputably. Sander usually crooks fugitively or unfenced In the previous examples, a Secondary Section may not explain any mathematics. The enum names available in an enum type can have the same value. For this reason if there is the slightest risk of the reader misunderstanding the meaning of the program, unassigned constant get the value from the previous constant and plus one. The array is derived datatype whereas structure is programming defining one. Defining a structure only creates a template, almost as bad, info structure is defined with four members. We covered if statements in previous chapters. If we were working on a more complex program, we have added italics to our design. GCC provides multiple methods of turning packing off. Repeated declarations can happen if include files are nested and will cause the compilation to fail. Major structures should be declared at the top of the file in which they are used, but not required. Scoped enum in c programming examples in front of. So the only way a user can understand an enum value if that is converted to a string and given to the user interface. You can also use the enums variable name. An enumeration set can contain duplicate constant values. The trick is to create an array of strings and use the enums to index the array. Specified by writing illogical code can access can variable throughout its enum classes and c enum programming examples in the entire enum? Enumerated Types allow us to create our own symbolic names for a list of related ideas.
[Show full text]
Fundamentals of Programming 1 Enumerated Types and Linear Arrays
Notes Fundamentals of Programming 1 Enumerated Types and Linear Arrays Arkadiusz Chrobot Department of Computer Science December 7, 2020 1 / 42 Outline Notes Data Abstraction Enumerated Types The typedef Keyword Linear Arrays Initialization of an Array Basic Operations on Linear Array 2 / 42 Data Abstraction Notes Abstraction can be applied not only to statements but also to data. The C programming language allows a programmer to create custom data types specific to a problem that is to be solved. An example of such a data type is the enumerated type. 3 / 42 Enumerated Types Notes An enumerated type makes it possible to give names to characters or numbers that belong to a subset of integers. In other words, the enumerated type may be considered as a set of constants. The overall pattern for defining an enumerated type is the following: enum type_name {element_1=value, …, element_n}; Please note, that the name (identifier) of each element is written in uppercases, just like names of constants. This is only a matter of con- vention. Any name can be used, provided it is legal in the C language. To each element of the enumerated type can be assigned a character or an integer number. However, if no value is given to the elements by the programmer, the compiler will assign to them successive numbers of int type, starting from 0. It is also possible for the programmer to assign the same value to more than one element or to assign a value only to one element or a selected group or groups of elements.
[Show full text]
Type Casting Enumeration Types
cis15 type casting advanced programming techniques, using c++ fall 2007 lecture # I.3 • used to convert between fundamental (simple) data types (e.g., int, double, char) topics: • there are two ways to do this • (1) the C way (technically obsolete): • type casting double d = 65.0; • enumeration types int i = (int)d; • typedef char c = (char)i; • precedence and associativity • (2) the C++ way: • control ﬂow – static_cast: for conversions that are “well-deﬁned, portable, invertable”; e.g., like • command line arguments the C ways, above – reinterpret_cast: for conversions that are system-dependent (not recommended) – const_cast: for conversions where the value of the variable being converted cannot be changed; data type must always be a pointer or reference – dynamic_cast: for converting between classes (to be discussed later in the term) • syntax: static_cast<type>(variable) cis15-fall2007-sklar-lecI.3 1 cis15-fall2007-sklar-lecI.3 2 enumeration types • example: void showSuit( int card ) { • used to declare names for a set of related items enum suits { diamonds, clubs, hearts, spades } suit; suit = static_cast<suits>( card / 13 ); • for example: switch( suit ) { enum suit { diamonds, clubs, hearts, spades }; case diamonds: cout << "diamonds"; break; • internally, each name is assigned an int value, in order starting with 0 case clubs: cout << "clubs"; break; case hearts: cout << "hearts"; break; • so in the above example, diamonds is actually 0, clubs is 1, and so on case spades: cout << "spades"; break; • but you create an enum data type if you want to use the names instead of the values, so } you don’t really care what the values are internally cout << endl; • although there are cases when you do want to set the value explicitly, e.g.: } // end of showSuit() enum answer { yes, no, maybe = -1 ); • syntax: enum tag { value0, value1, ..
[Show full text]