4.31 - Set Static Separation of Duty (SSD) Set Cardinality

SDSet setSsdSetCardinality( SDSet ssdSet, int cardinality ) throws SecurityException;

This command sets the cardinality associated with a given SSD role set.

  • The new cardinality is a natural number greater than or equal to 2 and less than or equal to the number of elements of the SSD role set.
  • The SSD constraint is satisfied after setting the new cardinality.
  • Affects admin time role assignments.

required parameters:

  • SDSet#name - contains the name for the Set to be modified.
  • cardinality - contains new cardinality setting for SSD.


  • SecurityException - thrown in the event of data validation or system error.


import org.apache.directory.fortress.core.AdminMgr;
import org.apache.directory.fortress.core.AdminMgrFactory;
import org.apache.directory.fortress.core.model.SDSet;
import org.apache.directory.fortress.core.SecurityException;

public static void testSetSsdSetCardinality()
    String szLocation = ".testSetSsdSetCardinality";
        AdminMgr adminMgr = AdminMgrFactory.createInstance();
        SDSet inSsdSet = new SDSet();
        // existing set name:
        inSsdSet.setName( "mySsdSetName" );
        // a number >= 2 and <= number of elements of the SSD role set.
        int cardinality = 2;
        SDSet outSsdSet = am.setSsdSetCardinality( inSsdSet, cardinality );
    catch (SecurityException ex)
        LOG.error(szLocation + " caught SecurityException rc=" + ex.getErrorId() + ", msg=" + ex.getMessage(), ex);