ALFA, the Axiomatics Language For Authorization, is a domain-specific language used to write fine-grained authorization policies which are then converted into XACML 3.0.
ALFA, the Axiomatics Language For Authorization, is a domain-specific language used to simplify the authoring and development of access control policies. The ALFA language maps directly into the xacml language.
ALFA and xacml help developers and architects implement fine-grained, attribute-based access control (abac) which is an evolution / extension of the role-based access control model (rbac). ALFA and XACML can also be used to author RBAC policies.
Sample ALFA policies include:
- A user with the role=editor can do the action=edit on a resource of type=document
- A user with the role=publisher can do the action=approve on a resource of type=document
- A user cannot do the action=approve if the author=the user
Role, action, resource type, author, user are all examples of attributes.
XACML policies can then be processed by a policy decision point (PDP).
