RE: Layers in the WSA (was RE: [Fwd: UN/CEFACT TMG Releases e-Business Architecture Technical Specification for Public Review])

> WS-Policy only addresses security.

I don't think this is correct. The spec Introduction says:

"WS-Policy defines a policy statement to be a collection of one or more policy assertions. Some assertions specify traditional requirements and capabilities that will ultimately manifest on the wire (e.g., authentication scheme, transport protocol selection). Some assertions specify requirements and capabilities that have no wire manifestation yet are critical to proper service selection and usage (e.g., privacy policy, QoS characteristics)."

Also, IBM says at [1]:

"Although Policy Framework does add another mechanism to the security of Web services, the applicability of the policy framework is not reserved to the security domain alone. "

And Microsoft says at [2]:

"The Web Services Policy Framework (WS-Policy) provides a general-purpose model and corresponding syntax to describe and communicate the policies of a Web service."

Ugo


[1] http://www-106.ibm.com/developerworks/webservices/library/ws-polfram/
[2] http://msdn.microsoft.com/webservices/understanding/gxa/default.aspx?pull=/library/en-us/dnglobspec/html/wspolicyspecindex.asp