[Yanel-dev] policy-map

[Michael Wechner]

Hi Simon

I think you are right, the policy map should have less priority than the
one1one mapping, whereas I assumed that
this was the case. I will have to check it myself.

If it should be the case as you describe it, then I think we should
change it, whereas we have to think of backwards compatibility.

As a workaround you might be able to add an additional pattern inside
your policy map ahead of the general pattern.

HTH

Michael

Am 19.06.15 um 10:49 schrieb simon:
> Hi all
>
> I just used the first time the policy-map. I added a matcher for all
> admin pages e.g. <matcher pattern="/**/admin/**"
> path="/admin/administrator.policy"/>
> Now i thought if i wanted to allow certain users to access certain
> admin pages i will add a police file with the right permissions for
> this admin page.
> But it seems the policy-map is stronger. Is this as it should be?
> Shouldn't it be the other way around? Or how would you solve this?
>
> Cheers
> Simon
>