When you develop policies, you can use value processing to manipulate data that comes from attributes and services. One value processing option is to use the Spring Expression Language (SpEL). Because SpEL is so powerful, you might want to configure the Java classes available through SpEL to limit what users can do with it.
Use the optional AttributeProcessing.SpEL.AllowedClasses
parameter
in the core
section of the options file to limit the Java classes
available through SpEL.
These instructions are for configuring SpEL Java classes for use in the Policy Editor. When using embedded PDP mode, you must add Java classes to the SpEL Allowed Class list to use them in deployment packages. See Adding SpEL Java classes to the allowed list.