in fact i have read this article: http://wso2.com/library/articles/2013/11/fine-grained-xacml-authoriation-with-pip-points/
it was really interesting for me. it matches very well what i want to do. i've tried to do the same thing but using wso2am 1.7.0 API Manager. But while i'm trying to retrieve the policies navigating in the carbon UI
home->PAP->PolicyAdministration
i got the following exception The following error details are available. Please refer logs for more details.
org.apache.axis2.AxisFault: Exception occurred while trying to invoke service method getAllPolicies
at org.wso2.carbon.identity.entitlement.ui.client.EntitlementPolicyAdminServiceClient.handleException(EntitlementPolicyAdminServiceClient.java:478)
at org.wso2.carbon.identity.entitlement.ui.client.EntitlementPolicyAdminServiceClient.getAllPolicies(EntitlementPolicyAdminServiceClient.java:81)
at org.apache.jsp.entitlement.index_jsp._jspService(org.apache.jsp.entitlement.index_jsp:183)
at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:111)
Can anyone help me answering these questions? IS it possible to do the same thing with WSO2 AM? Do you have idea to solve this issue?
Thanks.
Yes.. you can do it with APIM, but you need to install the XACML feature in to the Identity Server. According to the your comment, It seems to be that you have already installed the XACML feature in APIM. Because if not, you can not see the PAP->Policy Administration UI. But there can be some version mismatch when installing the feature.. Because APIM and WSO2IS may not have released in same version of the org.wso2.carbon.identity.entitlement.stub
. However same type of SO question can be found from here. I have given some solution for it. You can try it as well. But if you are looking for proper deployment, I suggest to use Identity Server as separate PDP engine rather than installing PDP feature in the APIM. You can find about more details from here as well