Configuration Guides › Policy Server Configuration Guide › Global Policies, Rules, and Responses › How to Configure Global Policies › Global Rules › Global Rules for Authorization Events

Global Rules for Authorization Events

Global rules that include SOA Security Manager authorization events allow SOA Security Manager to call responses based on whether a user is or is not authorized for the resource the user requested. Authorization events occur after a user is authenticated, if a rule that protects a resource contains an On-Access event. When the user has been granted or denied access based on their privileges, the appropriate event is triggered.

The following is a list of possible On-Access events:

On-Access-Accept

Occurs as the result of successful authorization. This event may be used to redirect users who are authorized to access a resource.

On-Access-Reject

Occurs as the result of failed authorization. This event may be used to redirect users who are not authorized to access a resource.

When a user is authorized (or rejected), the Policy Server passes any responses associated with the applicable On-Access rule back to the requesting Agent.