Gateway obligation enforcement

Carries out the obligations the PDP emits, and fails closed when it cannot.

• Control id: gateway_enforcement
• Shape: deny. Segment bindings do not reach this control, because its Rego does not read settings through pbac.segments.settings.
• Enforced at: gateway

Policy data

This control owns no policy data row.

Reason codes

Code	Category	Entry point	Setting
resolver_unavailable	mechanism	gateway	none
resolver_error	mechanism	gateway	none
filter_error	mechanism	gateway	none
not_permitted	mechanism	gateway	none

Implementation

Kind	Reference	Files	Role
java	com.identos.pbac.gateway.obligations.JsonFilterUtil	src/main/java/com/identos/pbac/gateway/obligations/JsonFilterUtil.java	enforces
java	com.identos.pbac.gateway.obligations.fileaccess.SourceResolver	src/main/java/com/identos/pbac/gateway/obligations/fileaccess/SourceResolver.java	enforces