<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="FeedCreator 1.8" -->
<?xml-stylesheet href="https://wiki.czechidm.com/lib/exe/css.php?s=feed" type="text/css"?>
<rdf:RDF
    xmlns="http://purl.org/rss/1.0/"
    xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
    xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
    xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel rdf:about="https://wiki.czechidm.com/feed.php">
        <title>IdStory Identity Manager</title>
        <description></description>
        <link>https://wiki.czechidm.com/</link>
        <image rdf:resource="https://wiki.czechidm.com/_media/wiki/logo.png" />
       <dc:date>2026-05-08T03:23:57+00:00</dc:date>
        <items>
            <rdf:Seq>
                <rdf:li rdf:resource="https://wiki.czechidm.com/devel/documentation/security/dev/authorization?rev=1755808879&amp;do=diff"/>
                <rdf:li rdf:resource="https://wiki.czechidm.com/devel/documentation/security/dev/confidential-storage?rev=1614025305&amp;do=diff"/>
            </rdf:Seq>
        </items>
    </channel>
    <image rdf:about="https://wiki.czechidm.com/_media/wiki/logo.png">
        <title>IdStory Identity Manager</title>
        <link>https://wiki.czechidm.com/</link>
        <url>https://wiki.czechidm.com/_media/wiki/logo.png</url>
    </image>
    <item rdf:about="https://wiki.czechidm.com/devel/documentation/security/dev/authorization?rev=1755808879&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2025-08-21T20:41:19+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Authorization policies</title>
        <link>https://wiki.czechidm.com/devel/documentation/security/dev/authorization?rev=1755808879&amp;do=diff</link>
        <description>Authorization policies

security authorization role policy default user role permissions

An authorization policy determines which permissions a user in CzechIdM has.

A policy is assigned to a role and everyone with this role gains the permissions determined by the policy as well.

	*  assigning permissions in CzechIdM via ordinary roles enables managing permissions for CzechIdM by a standard mechanism</description>
    </item>
    <item rdf:about="https://wiki.czechidm.com/devel/documentation/security/dev/confidential-storage?rev=1614025305&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2021-02-22T20:21:45+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Confidential storage</title>
        <link>https://wiki.czechidm.com/devel/documentation/security/dev/confidential-storage?rev=1614025305&amp;do=diff</link>
        <description>Confidential storage

confidential security configuration

To save sensitive data, the interface ConfidentialStorage has been created in the application. To read the data from the storage, it is necessary to know its owner (entity), and the key. 

The storage is currently used for:

	*  saving the sensitive data in</description>
    </item>
</rdf:RDF>
