Modeling authorization rules with the task editor.
使用任务编辑器建模授权规则。
Modeling authorization rules for ad-hoc tasks and task templates.
为临时任务和任务模板建模授权规则。
Authorization rules are applied in order, from top to bottom.
授权规则会按由上至下的顺序套用。
The authorization rules for escalations are aggregated directly by the TEscalation class.
升级的授权规则直接由tescalation类聚合。
The first type, query authorization rules, specify which type a queries a user may execute.
第一种类型是查询授权规则，它们指定一个用户可以执行哪些类型的查询。
These authorization role classes are available to model authorization rules for escalations.
以下授权角色类可用于为升级建模授权角色。
You define authorization rules using staff verbs for the set of predefined authorization roles.
可以使用人员谓词为预定义的授权角色集定义授权规则。
In the next section, you will see how to set up authentication and authorization rules using LDAP.
在下一部分中，您可了解到如何利用ldap来建立认证与授权规则。
Business Process Choreographer provides a default set of staff verbs that can be used for standard authorization rules.
业务流程编排提供了一组缺省的人员谓词，可以将其用于标准的授权规则。
This typically means that the authorization rules have to be embedded into the data access logic of the application itself.
这通常意味着必须将授权规则嵌入到应用程序本身的数据访问逻辑之中。
You can define authorization rules selecting the authorization role of your choice on the editor canvas, under Staff Settings.
通过在编辑器画布的Staffsettings下选择您所选的授权角色，可以定义授权规则。
However, when you deploy the Web site to a server running IIS, IIS will serve the static files without using authorization rules.
但是，将网站部署到运行IIS的服务器时，IIS将提供静态文件而不使用授权规则。
We also wanted to extend the functionality of the generated classes to include business rules, authorization rules and other features.
我们也希望能扩展生成类的功能，包括业务逻辑、授权逻辑和其他特性。
Authorization management is the central instance that evaluates staff verbs (authorization rules) and performs authorization based on them.
授权管理是评估人员谓词(授权规则)和基于这些人员谓词执行授权的中心实例。
Any authorization framework of substantial capability will enable an application to implement a complex and rich set of authorization rules.
任何具有强大功能的授权框架都将使应用程序能够实现一组复杂且丰富的授权规则。
It performs staff resolution queries based on flexible authorization rules, and caches the query results for better authorization performance.
它可以基于灵活的授权规则执行人员解析查询，并可以缓存查询结果，以获得更好的授权性能。
The authorization rules are defined using so-called staff verbs (also known as people assignment criteria), which are authorization rule templates.
该授权规则使用所谓的人员谓词(也称为员工分配条件)来定义，它们就是授权规则模板。
You will create the authorization rules based on the same set of staff verbs that you would use in the WebSphere Integration Developer task editor.
您将基于在WebSphereIntegrationDeveloper任务编辑器中使用的同一组人员谓词创建授权规则。
The Human Task Editor in WebSphere Integration Developer comes with a predefined set of staff query verbs, offering support for basic authorization rules.
WebSphereIntegrationDeveloper中的人工任务编辑器附带了一个预定义的人员查询谓词集，可以提供对基本授权规则的支持。
It means that authorization rules can be declared in a policy using standard language like XACML and then distributed to DataPower Appliance for enforcement.
这意味着可以在使用标准语言(比如XACML)的策略中声明授权规则，然后将其分发到DataPower Appliances进行实施。
If the set of default staff verbs does not satisfy your needs when modeling authorization rules, you can modify existing verbs or add new ones to the verb set.
在对授权规则建模时，如果缺省人员谓词集无法满足需要，您可以修改现有的谓词或向谓词集添加新谓词。
This way you will be able to leverage the vendor-provided strong security infrastructure and, where business needs require, support more complex authorization rules.
通过这种方式，您将能够利用厂商提供的强安全性基础设施，其中，业务要求需要支持复杂的授权规则。
As the name implies, a PEP is a point in the security architecture where authentication and authorization rules are enforced, based upon the policy defined in the PDP.
顾名思义，PEP是安全体系结构中基于PD p中定义的策略执行身份验证和授权规则的位置。
For each human task, you can select or enter the staff plug-in configuration JNDI name of your choice, which will resolve the authorization rules you defined, at run time.
对于每个人工任务，您可以选择或输入您所选的人员插件配置jndi名，它将在运行时解析您定义的授权规则。
Comparison between attribute expressions without identical syntax structures is permitted to gain an insight into the relationships of all kinds of authorization rules.
具有不同语法结构的属性表达式也可以比较，以发现不同授权规则间可能存在的关系。
With the human task editor (Figure 4), WebSphere Integration Developer provides you with a powerful editor to model authorization rules for business processes and human tasks.
WebSphereIntegrationDeveloper为您提供了一个功能强大的编辑器，即人工任务编辑器(图4)，您可以使用该编辑器为业务流程和人工任务建模授权规则。
Recall that one of the authorization rules stated that a user authorized to enter a particular building on a campus was also authorized to enter any public space in the building.
我们还记得，授权规则之一声明了授权进入校园特定大楼的用户也被授权进入该大楼中的任何公共空间。
The sections above described how you can model authorization rules, by defining what staff verb applies, and which input parameters it will receive to execute that rule at run time.
以上各节通过定义应用什么人员谓词，它在运行时接收哪些输入参数来执行该规则，描述了如何建模授权规则。
Staff verbs are abstract authorization rules for a human task role that can be parameterized and bound to a specific staff repository during business process and human task modeling.
人员谓词是一些针对人工任务角色的抽象授权规则，可以在业务流程和人工任务建模期间对其参数化并将其绑定到特定的人员存储库。
The programming model is introduced first, followed by a discussion on how you can model authorization rules for human tasks, what defaults apply, and how authorization is inherited.
本文首先介绍编程模型，然后讨论如何为人工任务建模授权规则，应用哪些缺省值，以及如何继承授权。
应用推荐