ViewTube

SAPL, the Streaming Attribute Policy Language, and its engine provide a full set of tools for securing applications applying dynamic authorization based on Attribute-Based Access Control (ABAC) and Attribute-Stream Based Access Control (ASBAC).

SAPL is a feature-complete policy language based on an intuitive JSON Data model supporting individual policies, policy sets, constraints, and obligations. SAPL is supported by syntax highlighting code editors with code completion and a full toolset for testing policies.

The SAPL Engine includes an embedded policy decision point (PDP) for Java applications, dedicated PDP servers, administration tools, and libraries for integration with popular Java and Python application frameworks.

SAPL implements a publish-subscribe protocol allowing for continuous policy enforcement in session- and datastream-based applications without the need for polling the PDP for new decisions.