Class PolicyManager


  • @Supported
    @Deprecated
    public final class PolicyManager
    extends Object
    Deprecated.
    As of OpenSSO Express 8.0, use com.sun.identity.entitlement instead as Entitlement has replaced Policy.
    The PolicyManager class manages policies for a specific organization, sub organization or a container. This class is the starting point for policy management, and provides methods to create/modify/delete policies.

    It is a final class and hence cannot be further extended. The methods in this class works directly with the backend datastore (usually a directory server) to store and manage policies. Hence, user of this class must have valid SSOToken and privileges to the backend datastore.

    • Constructor Detail

      • PolicyManager

        @Supported
        public PolicyManager​(SSOToken token)
                      throws SSOException,
                             PolicyException
        Deprecated.
        Constructor for PolicyManager for the top (or root) organization. It requires a SSOToken which will be used to perform all data store operations. If the user does not have sufficient privileges NoPermissionException will be thrown.
        Parameters:
        token - SSOToken of the user managing policy
        Throws:
        SSOException - invalid or expired single-sign-on token
        PolicyException - for any other abnormal condition
      • PolicyManager

        @Supported
        public PolicyManager​(SSOToken token,
                             String name)
                      throws SSOException,
                             NameNotFoundException,
                             PolicyException
        Deprecated.
        Constructor for PolicyManager for the specified organization, sub organization or a container object. The names of the organization, sub organization or the container object could be either "/" separated (as per SMS) or could be the complete DN of the object. For example: /isp/coke, /isp/pepsi/tacobell, etc., or "ou=tacobell, o=pepsi, o=isp", "o=coke, o=isp", etc. The constructor also requires a single sign on token. which will be used to perform all data store operations. If the user does not have sufficient privileges NoPermissionException will be thrown.
        Parameters:
        token - single-sign-on token of the user managing policies
        name - name of the organization, sub organization or container for which to manage policies. The name could be either slash (/) separated or the complete DN.
        Throws:
        SSOException - invalid or expired single-sign-on token
        NameNotFoundException - if the given organization, sub-organization or container name is not present
        PolicyException - for any other abnormal condition