Business Rules
Signing Authority implements a number of business rules related to attributes in the BAR manifest (META-INF/MANIFEST.MF). One of the most important set of rules is the subset of Signing Controlled capabilties that a developer can add to their BAR manifest in the entry-point-system-action attribute. In most cases, the signing operation will fail if a business rule is not met.
Signing Authority relies on the BAR packager library for evaluating proper syntax of a BAR file. In some cases, additonal syntax checking was added (for example, Entry-Point-validation) to cover a historical limitation that may have exposed a security vulnerability.
Status - Active, inactive or deprecated.
Enforced By - Business rules can be enforced by the BARsigner cient or the Signing Authority server (websigner).
Enforced Per Client ID - Some business rules are enforced per Signing Authority account (clientID). A property or permission of a Signing Authority account can be modified using the RemoteClientAdmin tool (screenshot) or in some cases through a SQL query.
Controlled By - Business rules may be hard coded in the Signing Authority client/server or determined through using a property/permission in the RemoteClientAdmin tool.
Version Added - Signing Authority version business rule was added (if known). See Release Notes for more details.