RE: Layers in the WSA (was RE: [Fwd: UN/CEFACT TMG Releases e-Business Architecture Technical Specification for Public Review])

Arkin,

It will also be interesting to see how the WS-Policy authors will position the spec with respect to the results of the W3C Properties and Features Task Force (or vice versa, given the fact that WS-Policy came out first). It certainly seems that there will be some overlap.

Ugo

> -----Original Message-----
> From: Assaf Arkin [mailto:[email protected]]
> Sent: Sunday, February 16, 2003 1:13 PM
> To: Ugo Corda
> Cc: [email protected]
> Subject: RE: Layers in the WSA (was RE: [Fwd: UN/CEFACT TMG Releases
> e-Business Architecture Technical Specification for Public Review])
> 
> 
> Ugo,
> 
> I stand correct.
> 
> I read all the related specifications as one block. My 
> initial impression,
> perhaps because WS-Policy refers specifically to security and 
> privacy, is
> that it was designed primarily to address security. And I assume other
> readers would fall in the same trap.
> 
> On the other hand, I also recieved the impression that WS-Policy is
> "proposing a model which other specifications should follow 
> when addressing
> other problem spaces (e.g. transactions, choreography)".
> 
> I guess that a second reading of the spec in isolation would 
> reveal even
> more hidden treasures ;-)
> 
> arkin
> 
> 
> > -----Original Message-----
> > From: Ugo Corda [mailto:[email protected]]
> > Sent: Sunday, February 16, 2003 10:41 AM
> > To: Assaf Arkin
> > Cc: [email protected]
> > Subject: RE: Layers in the WSA (was RE: [Fwd: UN/CEFACT TMG Releases
> > e-Business Architecture Technical Specification for Public Review])
> >
> >
> > > WS-Policy only addresses security.
> >
> > I don't think this is correct. The spec Introduction says:
> >
> > "WS-Policy defines a policy statement to be a collection of one
> > or more policy assertions. Some assertions specify traditional
> > requirements and capabilities that will ultimately manifest on
> > the wire (e.g., authentication scheme, transport protocol
> > selection). Some assertions specify requirements and capabilities
> > that have no wire manifestation yet are critical to proper
> > service selection and usage (e.g., privacy policy, QoS 
> characteristics)."
> >
> > Also, IBM says at [1]:
> >
> > "Although Policy Framework does add another mechanism to the
> > security of Web services, the applicability of the policy
> > framework is not reserved to the security domain alone. "
> >
> > And Microsoft says at [2]:
> >
> > "The Web Services Policy Framework (WS-Policy) provides a
> > general-purpose model and corresponding syntax to describe and
> > communicate the policies of a Web service."
> >
> > Ugo
> >
> >
> > [1] 
> http://www-106.ibm.com/developerworks/webservices/library/ws-polfram/
> > [2]
> > http://msdn.microsoft.com/webservices/understanding/gxa/default.as
> > px?pull=/library/en-us/dnglobspec/html/wspolicyspecindex.asp
> 
>