RBAC with Identity Server

Question

Right now I'm writing my final thesis.
I have developed a model for role-based access control and now I'm conducting a short evaulation of Identity Server to see how well it handles my model.
It's obvious Identity Server is highly expandable to suit the most needs anyone can have, BUT with some/much effort in developing plug-ins.
Have I missed something here? Where do I configure which rights a role has got?
Does anyone know of any documents describing RBAC with Identity Server or is RBAC just a nice buzz-word for the White papers?
best regards,
Peter

Answer 1

Two ways to enforce the permissions:
Policy Agents
ssoToken Properties
from:
http://docs.sun.com/source/816-6774-10/prog_sso.html#wp36428
A policy agent polices the web container on which a protected resource lives by enforcing a user�s assigned policies. They are an integral part of the cross-domain SSO functionality. Two types of policy agents are supported by Identity Server: the web agent and the J2EE/Java agent. The web agent enforces URL-based policy while the J2EE/Java agent enforces J2EE-based security and policy. Both types are available for installation separately from Identity Server and can be downloaded. Additional information can be found in the Sun ONE Identity Server Web Policy Agents Guide and J2EE Policy Agents Guide . General information on the Policy Service can be found in Chapter 7, "Policy Service," of this manual:
http://docs.sun.com/source/816-6774-10/prog_policy.html#wp27085
ssoToken Property
Access the session object called ssoToken that contains Role and Service for the logged in user.
from
http://docs.sun.com/source/816-6774-10/prog_sso.html#wp36428
/* get the sso token from http request */
SSOToken ssoToken = SSOTokenManager.getInstance().createSSOToken(request);
String appValue = ssoToken.getProperty(appPropertyName);
more:
http://docs.sun.com/source/816-6774-10/prog_intro.html#wp19687
david.