SOAP-запрос:
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><GetMbSec xmlns="http://www.fsight.ru/PP.SOM.Som"><tMbSec xmlns=""> <id>PCGKENPODPGEGOAEBLFFGBMAHOGHMEGEBKOBBHAIGEIMEDDN!M</id>
</tMbSec>
<tArg xmlns=""><pattern><policy><abacRules> <op>Get</op>
</abacRules>
</policy>
</pattern>
</tArg>
</GetMbSec>
</s:Body>
</s:Envelope>
SOAP-ответ:
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"><soapenv:Body><GetMbSecResult xmlns="http://www.fsight.ru/PP.SOM.Som" xmlns:q1="http://www.fsight.ru/PP.SOM.Som" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><id xmlns=""> <id>PCGKENPODPGEGOAEBLFFGBMAHOGHMEGEBKOBBHAIGEIMEDDN!M</id>
</id>
<meta xmlns=""><policy><abacRules> <alg>DenyOverride</alg>
<policySets><its><Item> <n>Набор</n>
<id>PLCST1</id>
<description />
<k>1</k>
<target> <n>OBJECT.CLASS</n>
<op>Equal</op>
<val>1295</val>
</target>
<active>1</active>
<alg>DenyOverride</alg>
<policies><its><Item> <n>Чтение</n>
<id>PLC1</id>
<description />
<k>2</k>
<target> <n>OPERATION</n>
<op>Equal</op>
<val>1048576</val>
</target>
<active>1</active>
<alg>PermitOverride</alg>
<rules><its><Item> <n>Правило</n>
<id>RULE1</id>
<description />
<k>3</k>
<target> <n />
<op>Empty</op>
<val />
</target>
<active>1</active>
<condition>ABAC.INTERSECC("NAME",SUBJECT.GROUPS,OBJECT.R_GROUPS) And ABAC.INTERSECC("NAME",SUBJECT.GROUPS,OBJECT.ORG_GROUPS)</condition>
<effect>Permit</effect>
</Item>
</its>
</rules>
</Item>
<Item> <n>Запись</n>
<id>PLC10</id>
<description />
<k>10</k>
<target> <n>OPERATION</n>
<op>Equal</op>
<val>2097152</val>
</target>
<active>1</active>
<alg>PermitOverride</alg>
<rules><its><Item> <n>Правило</n>
<id>RULE11</id>
<description />
<k>11</k>
<target> <n />
<op>Empty</op>
<val />
</target>
<active>1</active>
<condition>ABAC.INTERSECC("NAME",SUBJECT.GROUPS,OBJECT.W_GROUPS) And ABAC.INTERSECC("NAME",SUBJECT.GROUPS,OBJECT.ORG_GROUPS)</condition>
<effect>Permit</effect>
</Item>
</its>
</rules>
</Item>
</its>
</policies>
<policySets> <its />
</policySets>
</Item>
</its>
</policySets>
</abacRules>
</policy>
<bisearchEnable>Disable</bisearchEnable>
</meta>
</GetMbSecResult>
</soapenv:Body>
</soapenv:Envelope>
JSON-запрос:
{
"GetMbSec" :
{
"tMbSec" :
{
"id" : "PCGKENPODPGEGOAEBLFFGBMAHOGHMEGEBKOBBHAIGEIMEDDN!M"
},
"tArg" :
{
"pattern" :
{
"policy" :
{
"abacRules" :
{
"op" : "Get"
}
}
}
}
}
}
JSON-ответ:
{
"GetMbSecResult" :
{
"id" :
{
"id" : "PCGKENPODPGEGOAEBLFFGBMAHOGHMEGEBKOBBHAIGEIMEDDN!M"
},
"meta" :
{
"policy" :
{
"abacRules" :
{
"alg" : "DenyOverride",
"policySets" :
{
"its" :
{
"Item" :
{
"n" : "Набор",
"id" : "PLCST1",
"description" : "",
"k" : "1",
"target" :
{
"n" : "OBJECT.CLASS",
"op" : "Equal",
"val" : "1295"
},
"active" : "1",
"alg" : "DenyOverride",
"policies" :
{
"its" :
{
"Item" :
[
{
"n" : "Чтение",
"id" : "PLC1",
"description" : "",
"k" : "2",
"target" :
{
"n" : "OPERATION",
"op" : "Equal",
"val" : "1048576"
},
"active" : "1",
"alg" : "PermitOverride",
"rules" :
{
"its" :
{
"Item" :
{
"n" : "Правило",
"id" : "RULE1",
"description" : "",
"k" : "3",
"target" :
{
"n" : "",
"op" : "Empty",
"val" : ""
},
"active" : "1",
"condition" : "ABAC.INTERSECC("NAME",SUBJECT.GROUPS,OBJECT.R_GROUPS) And ABAC.INTERSECC("NAME",SUBJECT.GROUPS,OBJECT.ORG_GROUPS)",
"effect" : "Permit"
}
}
}
},
{
"n" : "Запись",
"id" : "PLC10",
"description" : "",
"k" : "10",
"target" :
{
"n" : "OPERATION",
"op" : "Equal",
"val" : "2097152"
},
"active" : "1",
"alg" : "PermitOverride",
"rules" :
{
"its" :
{
"Item" :
{
"n" : "Правило",
"id" : "RULE11",
"description" : "",
"k" : "11",
"target" :
{
"n" : "",
"op" : "Empty",
"val" : ""
},
"active" : "1",
"condition" : "ABAC.INTERSECC("NAME",SUBJECT.GROUPS,OBJECT.W_GROUPS) And ABAC.INTERSECC("NAME",SUBJECT.GROUPS,OBJECT.ORG_GROUPS)",
"effect" : "Permit"
}
}
}
}
]
}
},
"policySets" :
{
"its" : ""
}
}
}
}
}
},
"bisearchEnable" : "Disable"
}
}
}
public static GetMbSecResult GetABACRules(string mb)
{
var somClient = new SomPortTypeClient(); // Прокси-объект для выполнения операций
// Параметры выполнения операции
var tGet = new GetMbSec()
{
tArg = new GetMbSecArg()
{
pattern = new MbSecMdPattern()
{
policy = new MbSecPolicyPattern()
{
abacRules = new MbSecAbacRulesPattern()
{
op = ListOperation.Get
}
}
}
},
tMbSec = new MbId() { id = mb }
};
// Получение атрибутов доступа у пользователя
var result = somClient.GetMbSec(tGet);
return result;
}