Edit a Security Policy File
After you have created a policy file for your security domain, you must edit the settings in the file to specify the security configuration for the domain.
For detailed information on editing security policy files, refer to the TIBCO ActiveSpaces Developer’s Guide.
Table 37, Security Policy File Sections indicates the sections in the policy file. Some sections are optional and might not need to be modified from the default values or specified in your security policy file. These sections are marked as “optional.”
| Setting | Requirements | Description |
|---|---|---|
| Metaspace Access List | Required | Specifies the metaspaces in the security domain and the discovery URL to be used to discover each metaspace.
You must specify at least one metaspace and discovery URL. For detailed information on the settings, see TIBCO ActiveSpaces Developer’s Guide. |
| Transport Security | Required | Specifies the type of Transport security used when ActiveSpaces data is transmitted.
For detailed information, see TIBCO ActiveSpaces Developer’s Guide. |
| Restricted Transport Access | Required | Specifies whether transport access is restricted to members with specific token identities
For detailed information, see TIBCO ActiveSpaces Developer’s Guide. |
| Data Encryption | Optional | Specifies whether tuple data is encrypted in shared memory and when it is persisted on local storage.
The default setting, data_encryption=false, specifies that data is not encrypted. For detailed information TIBCO ActiveSpaces Developer’s Guide. |
| Authentication | Optional | Species whether user authentication is required, and if so, what type of authentication is used.
The default value, authentication=none, specifies there is no authentication. For detailed information, see TIBCO ActiveSpaces Developer’s Guide. |
| Security Domain Access Control | Optional | Specifies whether access control is required.
The default value access_control=false, specifies that there is no access control. For detailed information, see TIBCO ActiveSpaces Developer’s Guide. |
| Access Control Groups | Optional | Allows you to specify what groups or users are granted access to specified to ActiveSpaces operations.
The default policy file contains a groups keyword with no groups defined. For detailed information, see TIBCO ActiveSpaces Developer’s Guide. |
| Access Control Permissions | Optional | Allows you to specify which ActiveSpaces operations are permitted for specified groups or users.
The default policy file contains a permissions keyword with no permissions defined. For detailed information on setting permissions, see TIBCO ActiveSpaces Developer’s Guide. |