- From: Christopher B Ferris <chrisfer@us.ibm.com>
- Date: Wed, 10 Jan 2007 09:31:35 -0500
- To: Fabian Ritzmann <Fabian.Ritzmann@Sun.COM>
- Cc: "public-ws-policy@w3.org" <public-ws-policy@w3.org>, public-ws-policy-request@w3.org
- Message-ID: <OF05FA40AB.DD5E6D67-ON8525725F.004F0FF4-8525725F.004FC67B@us.ibm.com>
Fabian,
So, you are basically stating up-front that the WG could close this with
no action today and
simply add the v.next keyword so that it is taken into consideration with
the others we have closed in this
manner?
Cheers,
Christopher Ferris
STSM, Software Group Standards Strategy
email: chrisfer@us.ibm.com
blog: http://www.ibm.com/developerworks/blogs/page/chrisferris
phone: +1 508 377 9295
Fabian Ritzmann <Fabian.Ritzmann@Sun.COM>
Sent by: public-ws-policy-request@w3.org
01/10/2007 06:13 AM
To
"public-ws-policy@w3.org" <public-ws-policy@w3.org>
cc
Subject
[V.Next] 4179 Preferences for policy expressions
We would like to get this issue logged for V.Next.
http://www.w3.org/Bugs/Public/show_bug.cgi?id=4179
Title
Preferences for policy expressions
Description
For V.Next, WS-Policy should consider how to handle preferences. Earlier
attempts to apply preferences to WS-Policy was using an absolute scale
where there was no guarantee that two policy providers were using the same
scale. Therefore preferences must be relative to one policy document. For
V.Next, WS-Policy should either supply 1) a mechanism to indicate relative
preferences or 2) a standard preference XML attribute for policy
assertions. Priority is a synonym for preference in the context of this
document.
Justification
Preferences can be used by policy providers to indicate to policy
consumers which policy assertions are preferred. This is particularly
relevant in scenarios where a policy consumer chooses policies
automatically without human interaction. For example, three encryption
algorithms may be supported, but one is extremely slow but uses minimal
memory and is available for use by memory-constrained clients. This
example also shows that policy consumers may have their own set of
preferences that can override the preferences of the policy provider.
Target
WS-Policy Framework V.Next
Proposal
Several approaches may be considered:
1. Stating document order in a Policy indicates preferences would be
sufficient. Determine if the WG would need to resolve any contradiction to
the current rule that no policy elements are ordered.
2. Policy alternatives could be associated with identifiers. A policy
metadata syntax could list identifiers in preference order.
3. An XML attribute that contains relative preference numbers to
include in assertion elements. The preference or priority would apply only
to the immediate level [1]. XPath may be used to examine or select
portions of a WS-Policy instance for analysis, transformation or other
uses. To contain this, options at the same level without explicit
preference indications could be assumed to be equivalent [2]. This would
enable non-normalized policies where preferences may not be attached
consistently [3].
4. Domains could provide a proprietary means of expressing
preferences. This has already been detected in the security arena, e.g.
<AlgorithmSpeed>slow</AlgorithmSpeed> could be included under the same
<All> operator as the slow encryption algorithm. However, as this should
be a mechanism that cuts across domains, this is not an optimal or
interoperable approach.
In order to effectively handle intersections and merge, this proposal
could be extended to include concrete algorithms. Nested policies must be
considered. A standard algorithm for a policy consumer is required to
compute the most preferred policy alternative.
[#1]
<All Preference="6">
<ExactlyOne>
<All Preference="3">
<Assertion1 />
</All>
<All Preference="2">
<Assertion2 />
</All>
</ExactlyOne>
</All>
<All Preference="1">
<Assertion3 />
</All>
Which would be normalized into three alternatives (sorted according to
preference):
<All>
<Assertion3 />
</All>
<All>
<Assertion2 />
</All>
<All>
<Assertion1 />
</All>
would have the following preference order:
Assertion3
Assertion2
Assertion1
[#2] The WG may specify a default, possibly with a Policy attribute to
override, to indicate whether options without explicit preference
indications are considered and at what preference. Note, this is similar
to any recommendation that may be made to WS-Addressing. See draft:
http://lists.w3.org/Archives/Member/member-ws-policy/2006Oct/0002.html.
[#3] More than one attribute may be needed or the capability to acquire
the value of this attribute. We recognize this may need more discussion.
--
Fabian Ritzmann
Sun Microsystems, Inc.
Stella Business Park Phone +358-9-525 562 96
Lars Sonckin kaari 12 Fax +358-9-525 562 52
02600 Espoo Email Fabian.Ritzmann@Sun.COM
Finland
Received on Wednesday, 10 January 2007 14:44:37 UTC