这个访问决策管理器负责制定授权决策。
The access decision manager is responsible for making authorization decisions.
PDP 作出的授权决策被发送到PEP。
The authorization decision arrived at by the PDP is sent to the PEP.
授权决策传回PEP。
Acegi的拦截过滤器用于做出授权决策。
Acegi's interceptor filters are used to make authorization decisions.
义务是PEP必须与授权决策的实施一起执行的动作。
Obligations are the actions that must be performed by the PEP in conjunction with the enforcement of an authorization decision.
为ApplicationServer进行授权决策。
在评估策略之后，特定的义务与授权决策一起发送给PEP。
After a policy has been evaluated, specific obligations are sent to the PEP along with the authorization decision.
此授权决策(true或false)将返回到服务器运行时。
This authorization decision, true or false, is returned to the server runtime.
除了强制实施授权决策外，PEP还负责执行义务所规定的操作。
In addition to enforcing the authorization decision, the PEP is responsible for executing the operations specified as obligations.
授权决策：授权决策断言管理给定主体访问资源的权限。
Authorization decision: Authorization decision assertion manages a given subject's authority to access resources.
PEP履行义务，并根据PD P发送的授权决策允许或拒绝访问。
The PEP fulfills the obligations and, based on the authorization decision sent by PDP, either permits or denies access.
创建所有必需的XACML组件之后，应该能够获得该请求的授权决策。
After you've created all of the required XACML components, you should get an authorization decision for this request.
JACC允许根据这些permission类进行授权决策。
JACC enables authorization decisions based on these permission classes.
拦截过滤器使用三个组件来做出授权决策，我在清单7中对其进行了配置。
Interceptor filters use three components to make authorization decisions, which I have configured in Listing 7.
无论使用哪种技术，这些授权决策必须在很短时间内完成才能支持巨大的流量。
Regardless of the technology used, these authorization decisions must happen quickly and support high volumes of traffic.
这样，第三方授权提供程序就能够在用户访问J2EE资源时进行授权决策了。
In this way, third party authorization providers are able to make authorization decisions when a user accesses J2EE resources.
设置好配置后，开发人员就可以开始使用JEE授权api，从而做出授权决策。
Once this configuration has been set, the JEE authorization APIs are available to developers so that authorization decisions can be made.
存储在安全上下文中的Authentication对象将用于做出授权决策。
The Authentication object stored in the security context will be used later to make authorization decisions.
这种情况下，源站点从目标Web站点请求一个标志，后者返回一个授权决策标志。
In this case the source site requests a token from the target Web site, which returns an authorization decision token.
为PD p调用evaluate方法评估来自PEP的请求，这将返回授权决策。
Evaluate the request from the PEP by calling the evaluate method on the PDP. This returns the authorization decision.
然后名为pdosd的集中授权后台进程在系统调用时参与所有授权决策。
The centralized authorization daemon named pdosd then participates in all authorization decisions when a system call is made.
如果完全按照本文所述创建XACML组件，PD p将提供Permit授权决策。
If you created all the XACML components as described in this article, the PDP will give the Permit authorization decision.
接下来理想的情况应该是另一个组件查看证书中的身份，然后使用该身份做出授权决策。
What ideally should happen next is that another component will look at the identity in the certificate, and then use that identity to make an authorization decision.
接下来理想的情况应该是另一个组件查看证书中的身份，然后使用该身份做出授权决策。
Ideally, what should happen next is that another component will look at the identity in the certificate and then use that identity to make an authorization decision.
ObjectGrid授权插件查询Authorization服务并作出授权决策。
The ObjectGrid authorization plug-in consults the authorization service and makes an authorization decision.
每当需要使用这些信息来确定授权决策时，都可以从客户机或通过查找缓存来获取这些信息。
This information can be pulled in from clients or looked up on the cache whenever they are required for authoritative decision making.
TM系统从网络中搜索委派凭证以进行分布式授权决策，面临效率和可用性问题。
TM systems search delegation credentials from the network for making distributed authorization decisions, which is not efficient and highly available.
授权实施模块采用过滤器的方式拦截用户的资源请求并发送到授权决策服务器进行决策。
The implementation module USES filters to intercept the user's requests and sends them to the authorization module.
基于来自请求头的用户凭证和调用的MDM服务授权请求，其中以XACML表示的策略用作进行授权决策的根据。
Authorize the requests based on the user credentials from the request header and called MDM service, where a policy expressed in XACML is used as a basis for the authorization decision making.
XACML不但处理授权请求，而且还定义了一种机制，来创建进行授权决策所需的规则、策略和策略集的完整基础设施。
XACML not only processes the authorization requests, but it defines the mechanism for creating the complete infrastructure of rules, policies, and policy sets to arrive at the authorization decisions.
应用推荐