WSO2 Balana Milestone 1 of 1.0.0 Released…!!!

[Please note latest Balana source can be found from here  https://svn.wso2.org/repos/wso2/trunk/commons/balana/  It is trunk and source will be  moving  to github  ]

It is pleased to announce the M1 release of WSO2 Balana 1.0.0

WSO2 Balana is an open source implementation of XACML, which support XACML 1.0, 1.1, 2.0 and 3.0 specifications. WSO2 Balana is based on Sun’s XACML implementation. XACML 3.0 specification and some improvements have been implemented on top of it.

What is new ?

1. XACML 3.0 core specification
2. Multiple decision profile
3. File based policy finder module
4. Unit test for XACML 3.0
5. Samples

What is next ?

1. Improvements for multiple decision profile support
2. Improvements for XPath support
3. More unit tests, samples and documentation

Download:

You can download the WSO2 Balana M1 distribution from : http://people.wso2.com/~asela/balana/1.0.0/m1/

You can checkout the source code of 1.0.0 branch from : https://svn.wso2.org/repos/wso2/branches/commons/balana/1.0.0/

You can find the samples from distribution and temporary documentations from : http://xacmlinfo.com/category/balana/

Reporting Issues:

Issues can be reported using the public JIRA available at https://wso2.org/jira/browse/COMMONS

We really welcome your feedback and we are looking forward to hear your thoughts and suggestions…..


Discuss this article on Stack Overflow

Comments

  1. Hi everyone

    i have some errors to report about 1.0.0 release. Could you please let me register in JIRA? it is not possible to create issues without login.

    txs
    Lorenz

    1. thx – I managed it. I reported the bug on COMMONS but there is no componente Balana. I reported it with no component and version entries

  2. Hi, when i try to use:

    or even
    urn:oasis:names:tc:xacml:3.0:function:string-one-and-only
    in a it says that the factory doesn’t support it. I might be wrong but i think it should be supported. and looking at the code it looks like in the Apply class it doesn’t check if it is inside a condition element to load the proper factory.
    Hope it helps.

  3. sorry for the double post.. it doesn’t shows the tags in the comment so i rewrite in here 🙂
    Hi, when i try to use:
    urn:oasis:names:tc:xacml:3.0:function:any-of-any
    or also
    urn:oasis:names:tc:xacml:3.0:function:string-one-and-only
    in a Condition element it says that the factory doesn’t support it. I might be wrong but i think it should be supported. and looking at the code it looks like in the Apply class it doesn’t check if it is inside a condition element to load the proper factory.
    Hope it helps.

    1. Hi Luca,

      Thanks for pointing this. urn:oasis:names:tc:xacml:3.0:function:string-one-and-only function is not supported in Balana M1, We are hoping to add it for next release.

  4. Hi there,
    the registration seems to be broken (might as well be something with my browser). Anyway, I just wanted to let you know that it would be great, if the parsers uses node.getLocalname() maybe together with node.getNamespace() instead of node.getName(). The later one does not parse xacml2:PolicySet. After removing the xacml2 namespace from each element the file got parsed 😀
    Best regards,
    Michael

      1. Hi Lorenz and Michael,

        Lorenz, Sorry for the confusion. Actually jira was not in Balana project. Some how it has been missed. Now issue is fixed in trunk [1] and test case is added based on your policy. Please find more details in jira [1]. Please try out it and let us know the feedbacks.

        Michael, As Lorenz mentioned, His patch would resolve the issue. Thanks for reporting it.

        Lorenz, Thanks again for your contribution. It is really appreciated.

        Also , if there are any issues, Please let us know.

        [1] https://svn.wso2.org/repos/wso2/trunk/commons/balana/
        [2] https://wso2.org/jira/browse/COMMONS-94

  5. Within org.wso2.balana.cond.xacml3.StringComparingFunction
    private static String getArgumentType(String functionName) {
    if (functionName.equals(NAME_STRING_START_WITH) || functionName.equals(NAME_STRING_ENDS_WITH)){
    return IntegerAttribute.identifier;
    } else if (functionName.equals(NAME_STRING_CONTAIN)) {
    return StringAttribute.identifier;
    } else {
    return AnyURIAttribute.identifier;
    }
    }

    instead of
    private static String getArgumentType(String functionName) {
    if (functionName.equals(NAME_STRING_START_WITH) || functionName.equals(NAME_STRING_ENDS_WITH) || functionName.equals(NAME_STRING_CONTAIN)){
    return IntegerAttribute.identifier;
    } else {
    return AnyURIAttribute.identifier;
    }
    }

    Sorry for posting in here, but as said, my browser doesn’t show me any input fields to register for jira.

    1. Probably even better:

      private static String getArgumentType(String functionName) {
      if (functionName.equals(NAME_STRING_START_WITH) || functionName.equals(NAME_STRING_ENDS_WITH) || functionName.equals(NAME_STRING_CONTAIN)){
      return StringAttribute.identifier;
      } else {
      return AnyURIAttribute.identifier;
      }
      }

  6. Is this project still active? I was going to pick one of the XACML implementations and thought of using Balana since it supports XACML 3.0, but the Jira issues don’t show any latest fixes or updates. I don’t see new posts as well. Also the stackoverflow community support doesn’t seem to answer any Balana specific answers. Any thoughts on the future releases? Appreciate your comments.

  7. Hi Sri,

    Thanks for interesting in Balana.. Yes.. There were no much actives in the project for few months.. Mostly we have finished with XACML 3.0 core implementation. Therefore most of the things related to XACML 3.0 are working fine. Still we could not look for any other profile to implement. There are some performances and fine tuning needs to be done. Also i guess there are more than 10 -20 open issues as well.. We would be improving this further. Yes.. As we have done with core spec, we could do the 1.0.0 release… But we need to close all open jira. and there would be a release in the future.. Actually you may know Balana is used by Identity Server. Therefore if there are any issues with XACML in WSO2 Identity Server, Those would be fixed in the Balana as well. So i could say that project is always active.. 🙂 Unfortunately.. we did not have much time to focus on proper release process for Balana due to WSO2 Identity Sever releases. I am normally looking in to the stackoverflow questions.. may be some have been missed… oh.. i think we can create new tag “balana”.

    Hope you can see more updates on balana further…..

Leave a Reply

Your email address will not be published. Required fields are marked *