User classes
In Bravura Security Fabric , a user class is a way to segment users. A user class defines the criteria for segmenting users.
User classes are used throughout Bravura Security Fabric to help configure product administrators, user access rules, plugins, membership, and relationships between users.
These terms apply to user classes:
Participants | Describes types and interactions of class members; it does not refer to the members themselves. Participants may sometimes be referred to as actors . |
Personal user classes | Personal user classes have a single participant, defined by attribute or group membership. This participant can simply be identified as USERID. |
Relational user classes | Relational user classes have multiple participants; for example, MANAGER and SUBORDINATE. Users may be included in this class if they meet the criteria of any participant, or all participants. |
Built-in user classes | These user classes are pre-defined and cannot be modified. |
Policies | These are places within Bravura Security Fabric that are able to utilize user classes, such as pre-defined requests, administrator groups, plugin points, user access rules, authorizer groups. Policies may contain one or both types of user class points (below). |
Policy participants | These are participants in policies that are defined by user class participants using participant mapping. |
PSLang | PSLang is a scripting language developed by Bravura Security. The language uses a syntax much like C, but with a large set of built-in functions, some of which are geared towards the Bravura Security Fabric environment. |
User class test points | These are policies used to determine whether or not the participants satisfy the user class criteria. |
User class list points | These are policies used to list the participants that satisfy the user class criteria. |
User class criteria
There are three types of criteria that you can use to segment users :
Attribute criteria – defined by profile and request attributes
Membership criteria – defined by group membership
PSLang criteria – defined by PSLang expressions