Policy Server Guides › Policy Server Configuration Guide › Policies › Policy Processing › Authorization Processing for Hierarchical Policies › Policy Processing for Unauthorized Users

Policy Processing for Unauthorized Users

Policy processing for unauthorized users is the same, whether or not the user is explicitly denied access by a policy, or simply not contained in a policy that allows access. Any entitlements collected so far for that user are lost and the Policy Server processes OnAccessReject events in the context of the rejecting realm where the requested resource is located.

In the previous example, if employee1, who is not a member of the cn=managers group, attempts to access /home/employees/managers/manager.html, the Policy Server only processes OnAccessReject events for the /managers realm.