Asks whether a subject may perform an action on a resource.
Allowed without asking when no decider is installed, when
xacml.enforceAccess is off, or when the request names no resource or
action. A decider that throws is a defect: the request is allowed and the
fault logged under STS-XACML-0051.
Parameters
Optionalrequest: AccessRequest
the resource, action, subject (from the security context,
never the request), owner, required roles and context
Returns AccessAnswer
the answer; allowed is what a caller branches on, and
decision, why and policy are for the log
Asks whether a subject may perform an action on a resource.
Allowed without asking when no decider is installed, when
xacml.enforceAccessis off, or when the request names no resource or action. A decider that throws is a defect: the request is allowed and the fault logged under STS-XACML-0051.