public DelegationMask(IReadOnlyCollection <string> identifiers,
string policyIssuer,
string accessSubject,
IReadOnlyCollection <string> attributes,
IReadOnlyCollection <string> actions,
string resourceType,
string serviceProvider)
{
var policy = new Policy
{
Target = new PolicyTarget
{
Resource = new PolicyTargetResource
{
Type = resourceType,
Identifiers = identifiers.ToList(),
Attributes = attributes.ToList()
},
Actions = actions.ToList(),
Environment = new PolicyTargetEnvironment
{
ServiceProviders = new List <string> {
serviceProvider
}
}
},
Rules = new List <PolicyRule>
{
PolicyRule.Permit()
}
};
var policySet = new DelegationRequestPolicySet
{
Policies = new List <Policy>
{
policy
}
};
var request = new DelegationRequest
{
PolicyIssuer = policyIssuer,
Target = new Target
{
AccessSubject = accessSubject
},
PolicySets = new List <DelegationRequestPolicySet>
{
policySet
}
};
DelegationRequest = request;
}
public DelegationMask(string containerId,
string policyIssuer,
string accessSubject,
IReadOnlyCollection <string> attributes,
string action,
string resourceType = "CONTAINER.DATA")
{
var policy = new Policy
{
Target = new PolicyTarget
{
Resource = new PolicyTargetResource
{
Type = resourceType,
Identifiers = new List <string>
{
containerId.ToUpper(CultureInfo.CurrentCulture)
},
Attributes = attributes.ToList()
},
Actions = new List <string>
{
action.ToUpper(CultureInfo.CurrentCulture)
}
},
Rules = new List <PolicyRule>
{
PolicyRule.Permit()
}
};
var policySet = new DelegationRequestPolicySet
{
Policies = new List <Policy>
{
policy
}
};
var request = new DelegationRequest
{
PolicyIssuer = policyIssuer,
Target = new Target
{
AccessSubject = accessSubject
},
PolicySets = new List <DelegationRequestPolicySet>
{
policySet
}
};
DelegationRequest = request;
}
public DelegationMask(string policyIssuer, string accessSubject, DelegationRequestPolicySet customPolicies)
{
var request = new DelegationRequest
{
PolicyIssuer = policyIssuer,
Target = new Target
{
AccessSubject = accessSubject
},
PolicySets = new List <DelegationRequestPolicySet>
{
customPolicies
}
};
DelegationRequest = request;
}