Re: [V.Next] 4178 Declaration of policy domains in policy expressions


Same question as with 4179. Can the WG close today with no action and mark 


Christopher Ferris
STSM, Software Group Standards Strategy
phone: +1 508 377 9295

Fabian Ritzmann <Fabian.Ritzmann@Sun.COM> 
Sent by:
01/10/2007 06:11 AM

"" <>

[V.Next] 4178 Declaration of policy domains in policy expressions

We would like to get this issue logged for V.Next.

Declaration of policy domains in policy expressions 
Description and Justification
An explicit declaration of policy domain is important and improves 
processing efficiency. Such an explicit declaration could: 
1.      Make explicit requirements on intersection and merging. 
2.      Allow the policy vocabulary to be explicitly declared thus 
alleviating the need to iterate through all assertions contained in the 
3.      Enable the association of semantics with the absence of an 
4.      Facilitate reuse by allowing specialized policy engines to process 
policies for a specific domain. 
5.      Avoid combinatorial explosion in computing policy intersections 
whereby there must be a way to determine which policies must be 
intersected with others. 
Otherwise, all combinations must be attempted. Combinatorial explosion may 
render impossible the effective and efficient computability of 
intersection of large policies. 
WS-Policy Framework V.Next 
Of identified options, one solution would be to add a new attribute to the 
Policy element: 
/wsp:Policy/@Domains where @Domains could take a list of URIs to indicate 
the domains that the policy addresses. The URIs are separated by a space 
similar to the PolicyURI attribute. The domains would define suitable URIs 
such as the default namespace. 
An example of an RM policy with its domain: 
<wsp:Policy wsu:Id="anRMPolicy"

The intersection of policies that address different domains is an empty 
policy. Policies can be merged by adding up the URIs of the respective 
Domains attributes and applying the regular policy merge algorithm. Nested 
policies MAY use the Domains attribute to declare the domains they 
address. The top-level policy element SHOULD enumerate all Domains that 
its nested policies are declaring in their respective Domains attribute. 

Fabian Ritzmann
Sun Microsystems, Inc.
Stella Business Park             Phone +358-9-525 562 96
Lars Sonckin kaari 12            Fax   +358-9-525 562 52
02600 Espoo                      Email Fabian.Ritzmann@Sun.COM

Received on Wednesday, 10 January 2007 14:31:54 UTC