- From: Maryann Hondo <mhondo@us.ibm.com>
- Date: Wed, 14 Mar 2007 13:49:06 -0400
- To: public-ws-policy@w3.org
- Message-ID: <OF6387F6E4.9912664C-ON8725729E.00612EB8-8525729E.0061B003@us.ibm.com>
This relates to bug 4072-----http://www.w3.org/Bugs/Public/show_bug.cgi?id=4072 Description: The bug 4072, proposes removing section 4.1. This proposal addresses a revision of the section (4.1) rather than removing it. Target: Guidelines Replace section 4.1 with the following: Assertion Authors need to have a specific goal in mind for the assertions that they author. Assertion Authors should also understand the functionality that the WS-Policy framework provides and apply the knowledge of the policy framework processing when defining the set of assertions. Assertions can be simple or they can be complex. Assertion Authors may choose to specify multiple peer assertions, each carrying the semantic of a particular behavior, or they may choose to specify assertions that contains assertion parameters and/or nested policy expression (nested assertions), each of which relate to an aspect of the behavior, yet encapsulated within a single assertion. There are advantages to simplifying the set of assertions. The ultimate goal of policy is to enable interoperability. By keeping assertion design as simple as possible, Assertion Authors will more likely be able to meet that objective. If a set of assertions describes a wide range of behaviors, the ability to combine individual assertions may also need to be considered. The WS-Policy Attachment specification defines a number of different policy subjects to which an assertion can be attached. For attaching to WSDL subjects see 4.7 Levels of Abstraction in WSDL for more detail. Additionally, the framework provides for the means to extend the set of policy subjects beyond the set of subjects defined in the WS-Policy Attachment specification. The WS-Policy Attachment specification provides various mechanisms to attach a policy expression to a policy subject. Although a policy assertion may be constrained to a specific set of policy subjects by assertion authors, its semantics should not be dependent upon the mechanism by which the policy expression is attached to a given policy subject. For instance, an assertion "Foo" has the same semantic when attached to an operation policy subject regardless of whether it was attached using XML element policy attachment or the external URI attachment mechanism. Independence from a specific attachment mechanism allows policy tools to choose the most appropriate mechanism to attach a policy without having to analyze the contents of the policy. Best practice: Assertion Authors should include the following items in an assertion specification: * The definition of the assertion's semantic * The specification of the set of valid policy subjects to which an assertion may be attached. * The scope of the assertion in the context of a particular policy subject. For example, an assertion with Endpoint Policy Subject can be scoped to a given message exchange with that endpoint, or it can be scoped to all messages exchanged with that endpoint. The former case permits a client to select a different alternative with each successive message exchange. * Composition. If the assertion is used with other assertions in a context, it is necessary to consider how the assertion may, or may not, affect the composition. For example, if an assertion applies to the SOAP protocol, it would be necessary to consider how its presence must interact with other policy assertions that are defined for security. Best practice: The semantics a policy assertion should not depend on the attachment mechanism used.
Received on Wednesday, 14 March 2007 17:47:48 UTC