valuetype ProxyPrincipal :
truncatable SecurityLevel3::Principal
A ProxyPrincipal represents a principal that speaks for another.
The principal is proved that it is authorized to speak for another.
The system believes this, either by trust rules of its own,
or by delivered endorsement from the principal such as
Principal (B for A) where the endorsement takes the form
in the Principal Calculus as (T says B serves A)
where T is some entity trusted by the security service
to make those statements.
Important: This valuetype extends the Principal value type. The
the_name filed of this object will contain the name of the
speaks_for principal, as that is the name most access control
systems would care about. Therefore, this value type can be
truncated by access control systems that do not want to
examine the principal in detail.
speaking field
represents the principal A.
speaks_for field
represents the principal B.
public Principal speaking;In a Proxy Principal of (A for B) the
speaking field
represents the principal A.
public Principal speaks_for;In a Proxy Principal of (A for B) the
speaks_for field
represents the principal B.
factory create(in Principal speaking,
in Principal speaks_for);