IBM Security Verify

 View Only
  • 1.  Multiline AuthzRule via Rest-API

    Posted Fri September 04, 2020 10:43 AM
    Hi everybody!

    Does anybody know, how is it possible to create an AuthzRule, that contains multiple lines via Rest-API?
    The only way I found is to use pdadmin command "authzrule create", but in this case the whole rule content must be passed as a single string. "\n" or "\n" in that string are not supported, so the whole rule should be a one-line text.

    I appreciate any suggestion!

    ------------------------------
    Best Regards,
    Ivan Yartsev
    ------------------------------


  • 2.  RE: Multiline AuthzRule via Rest-API

    Posted Mon September 07, 2020 06:06 AM
    Hi Ivan,

    I spent a little time looking at this but I can't see how to create a multi-line rule outside the LMI either.  There used to be a way to load a pre-created XSL file but this was removed when we moved to the appliance form-factor.  I will see if the development team have any ideas on this.

    If you are creating authzn rules via API, I assume this is part of automation where the rule files exist in source control somewhere.
    Perhaps you could write a small utility to remove line-breaks from the rules in source control before applying in your scripts?  That way at least the files remain readable in source control even if they have no line breaks when uploaded?

    Jon.

    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------