class PolicyInterceptor(BaseInternalGovernanceInterceptor):
def __init__(self, *args, **kwargs):
self.policy_decision_point = PolicyDecisionPoint()
def outgoing(self, invocation):
if invocation.args.has_key('process'):
log.debug("PolicyInterceptor.outgoing: %s", invocation.args['process'])
else:
log.debug("PolicyInterceptor.outgoing: %s", invocation)
return invocation
def incoming(self, invocation):
if invocation.args.has_key('process'):
log.debug("PolicyInterceptor.incoming: %s", invocation.args['process'])
else:
log.debug("PolicyInterceptor.incoming: %s", invocation)
#checking policy
#Annotate the message has started policy checking
invocation.message_annotations[GovernanceDispatcher.POLICY__STATUS_ANNOTATION] = GovernanceDispatcher.STATUS_STARTED
ret = self.policy_decision_point.check_policies(invocation)
log.debug("Policy Decision: " + str(ret))
#Annonate the message has completed policy checking
invocation.message_annotations[GovernanceDispatcher.POLICY__STATUS_ANNOTATION] = GovernanceDispatcher.STATUS_COMPLETE
if ret == Decision.DENY:
self.policy_denied_message(invocation)
return invocation
def policy_denied_message(self, invocation):
#TODO - Fix this to use the proper annotation reference and figure out special cases
if invocation.headers.has_key('op') and invocation.headers['op'] != 'start_rel_from_url':
invocation.message_annotations[GovernanceDispatcher.POLICY__STATUS_ANNOTATION] = GovernanceDispatcher.STATUS_REJECT
def __init__(self, *args, **kwargs):
self.policy_decision_point = PolicyDecisionPoint()