SourceForge : Post

Project: Editor Discussion > REC:Secure Addressing Profile 1.0 > Refine granularity of policy attachment > List of Posts

Forum Topic - Refine granularity of policy attachment : (2 Items)

View: as

Update

Duane Merrill

03/25/2008 1:01 PM

post5993

Refine granularity of policy attachment

Currently, section 5.1 of the profile specifies that policy documents are to be bound to WS-Addressing actions using the
 follwing URI format: "urn:wsaaction:<wsa-action>".  (E.g., "urn:wsaaction:list", "urn:wsaaction:CreateActivity", "urn:
wsaaction:*", etc.).

However, other attachments schemes (such as WSDL attachment) allow for the policies specified in "Secure Communication" 
to be bound at the message-granularity (e.g., binding the "UsernameToken" policy to the "listRequest" input message).  

I'm suggesting we slightly alter the URI format to allow the binding of security policy to input/output/fault messages, 
(or any combination thereof): "urn:wsaaction:<wsa-action>[:<input|output|fault>]".  For example:

Bound to all messages for the list action:
   "urn:wsaaction:list"

Bound to all input messages for all actions:
   "urn:wsaaction:*:input"

Bound to all output & fault messages for the list action:
   "urn:wsaaction:list:output|fault"

Duane Merrill

05/01/2008 10:16 AM

post6013

Re: Refine granularity of policy attachment

Resolution: concluded it was not in the profile's best interest to alter this mechanism (and introduce new syntax or 
syntax from other specs, e.g. WSDL)

-Duane

Return