- From: Gilbert Pilz <gilbert.pilz@oracle.com>
- Date: Tue, 02 Mar 2010 12:07:04 -0800
- To: Ram Jeyaraman <Ram.Jeyaraman@microsoft.com>
- CC: Doug Davis <dug@us.ibm.com>, "public-ws-resource-access@w3.org" <public-ws-resource-access@w3.org>
- Message-ID: <4B8D6FE8.9010904@oracle.com>
Oracle supports the idea of opening a separate issue to discuss the use
of policies nested within a Feature Policy Assertion but we don't
support the changes below as they presume a resolution of "close with no
action" on this as-yet-to-be-created issue. Let's move forward, accept
MOAP as it is, and open a new issue to address (what appears to be) the
lone area of disagreement in this Mother Of All Proposals.
- gp
On 3/2/2010 10:40 AM, Ram Jeyaraman wrote:
>
> In order to make progress on the MOAP proposal, I like to suggest that
> we open a separate issue for discussing the use of nested or operation
> level policies; those policy aspects could be safely peeled off from
> the MOAP proposal and discussed as a separate issue.
>
> If we agree to do that, we can accept the MOAP proposal with the
> following changes:
>
> · Example 9-1. Remove line 17.
>
> · Remove the sentences
> "The Policy Assertion on line 17 indicates that the nested policy
> assertions apply to the WS-Eventing operations. For example, if line
> 17 includes some security related assertions then the WS-Eventing
> operations would need to be secured using those security mechanisms.
>
> When Feature Policy Assertions contain nested Policy Assertions (as
> show above in line 17), those assertions have Endpoint Policy Subject
> and apply to all message exchanges related to the feature."**
>
> · Make the following change -- remove the phrase shown in strikethrough:
> "*/mex:MetadataExchange/xs:any*
>
> This extensibility point allows for additional WS-MetadataExchange
> specific metadata to be included within the policy assertion - e.g.
> WS-MetadataExchange WSDL, or nested policy assertions related to the
> WS-MetadataExchange message exchanges."
>
> · The changes to section 12 (suggested in the attached thread).
>
> *From:* public-ws-resource-access-request@w3.org
> [mailto:public-ws-resource-access-request@w3.org] *On Behalf Of *Ram
> Jeyaraman
> *Sent:* Monday, March 01, 2010 7:19 PM
> *To:* Doug Davis; public-ws-resource-access@w3.org
> *Subject:* RE: MOAP v2
>
> On the question about the use of nested policy assertions we had
> discussed during the previous WG call, here are my thoughts:
>
> · Defining nested policies using the extension point in a parent
> policy doesn't work because extensions are ignorable whereas nested
> policy assertions (and the associated semantics) are not ignorable.
>
> · The policy attachment point is at the endpoint level.
>
> o When policies are defined at the endpoint level, the policy
> intersection algorithm allows matching the capabilities (of the client
> and the endpoint) and allows the client to engage the right behavior.
> That is, in Example 9-1, the security policy assertion and the
> EventSource policy assertions can be defined as siblings; this ensures
> that the client will use the right intersection of these policies to
> engage with the endpoint. The policies apply to all the operations
> supported by the endpoint.
>
> · Operation is not an attachment point for policies
>
> o If the intent in Example 9-1 is to describe operation level
> policies, that is, application of policies scoped to a specific
> operation, it cannot be supported using the general policy mechanism,
> since it does not allow operation as an attachment point for policies.
>
> · If the intent is NOT to define a nested policy assertion (as Ashok
> described earlier), then it can be done using a policy parameter (of
> the parent policy) that wraps the collection of inner policies.
>
> Thanks.
>
> *From:* public-ws-resource-access-request@w3.org
> [mailto:public-ws-resource-access-request@w3.org] *On Behalf Of *Doug
> Davis
> *Sent:* Tuesday, February 23, 2010 11:45 AM
> *To:* public-ws-resource-access@w3.org
> *Subject:* MOAP v2
>
>
> All,
> after several rounds of talks between Oracle, Microsoft and IBM, the
> latest version of MOAP can be found here:
> http://www.w3.org/2002/ws/ra/10/02/MOAPv2.zip
>
> The zip file contains all proposed spec changes and the changes include:
>
> *WS-EVD*: no changes since last time
>
> *WS-Eventing/Enum/Frag/Transfer* - look for edits done by "Dugv5":
> - Only minor wordsmithing/editing to the definitions of the assertions
>
> *WS-MEX:*
> - there are two MEX docs in the zip file.
> - the v1 version is the one sent to the WG a few weeks ago - no new
> edits were made.
> - the v6 version contains all of the edits since v1. All v1 edits
> were "accepted" so it should be easy to see the diff from v1.
> - the edits were done in stages so that's why you'll see several Dugv?
> names. It wasn't until round 4 of edits that I remembered to change
> the user name.
>
> The MEX edits include:
> - lots of minor editorial tweaks
> - there's a new Terminology section. This was added because it was
> felt that the two roles ('service endpoint' and 'metadata resource')
> needed to be defined and clarified. People should read/review this
> carefully.
> - the assertion was modified to advertise whether GetMetadata is
> supported - and the Dialect/Content params are now under
> GetMetadataSupported.
> - there's a new section 12 about Bootstrapping. This section was
> added to pretty much put all of the various pieces of the puzzle
> together when trying to bootstrap the process of talking to an endpoint.
> - updated the xsd/wsdl for GetWSDL
>
> Note: I'm planning on moving section 5 before section 4. This will
> make it so that we define the new mex:Metadata type before we use it.
> I didn't move it in the doc because then it would show up as modified.
>
> Outstanding MEX issues for the WG to discuss:
> - Example 8-5 - see comments in the doc
> - Example 12-1 - see comment in the doc
>
> thanks
> -Doug
> ______________________________________________________
> STSM | Standards Architect | IBM Software Group
> (919) 254-6905 | IBM 444-6905 | dug@us.ibm.com <mailto:dug@us.ibm.com>
> The more I'm around some people, the more I like my dog.
>
Attachments
- application/pkcs7-signature attachment: S/MIME Cryptographic Signature
Received on Tuesday, 2 March 2010 20:07:59 UTC