Web Services Policy Framework (WS-Policy) is an extensible XML-based framework that extends the configuration of a Web Service with domain specific security assertions and specifies the security requirements, expectations, and capabilities of the Web Service. In ALSB, one of the primary uses of WS-Policy is configuring message-level security in proxy services and business services.
ALSB includes three simple WS-Policy files that you can use to require clients to authorize, digitally encrypt, or digitally sign SOAP messages: Auth.xml
, Encrypt.xml
, and Sign.xml
. BEA recommends that unless you have specific security needs, you use these pre-packaged files as often as possible.
For more information about using these policies, see ALSB Policy Statements in AquaLogic Service Bus Security Guide.
If the ALSB WS-Policy statements do not meet your security needs, you can write your own WS-Policies (custom WS-Policies), import them to ALSB, and refer to them from the WSDL. (The ALSB WS-Policy statements are read-only.)
For information about creating and referring to custom WS-Policies, see Using Web Service Policy to Specify Inbound Message-Level Security in AquaLogic Service Bus Security Guide.
The Summary of WS-Policies page lists the custom Web Service Policies (WS-Policies) that you have added to the current ALSB domain. The ALSB Console does not display the ALSB WS-Policies, which are pre-packaged and available to all ALSB domains.
Click View All to remove the search filters and display all WS-Policies.
The unique name assigned to the WS-Policy. Click the name to see the View WS-Policy Details page. See Editing Custom WS-Policies.
|
|
The project name and the name of the folder in which the WS-Policy resides. Click on the name to see the project or folder that contains this resource. See Qualifying Resource Names Using Projects and Folders.
|
|
Contains a Delete icon. If a business service or proxy service has been configured to use a WS-Policy, a Deletion Warning icon indicates that you can delete the WS-Policy with a warning confirmation. This might result in conflicts due to unresolved references from the service to the deleted WS-Policy. See Deleting Custom WS-Policies
|
You can either import an XML file that contains your WS-Policy or write the WS-Policy directly in the ALSB Console.
Use the View WS-Policy Details page to view and change details of a specific custom Web Service Policy (WS-Policy). The ALSB Console does not display the ALSB WS-Policies, which are read-only.
The date and time that the user created this WS-Policy or imported it into the configuration. Click the date and time link to view the change history of this resource. See View Change History page.
|
|
The number of objects that this WS-Policy references. If such references exist, click the numeric link to view a list of the objects. See Viewing References to Resources.
|
|
The number of objects that reference this WS-Policy. If such references exist, click the numeric link to view a list of the objects. See Viewing References to Resources.
|
|
You cannot change the Resource Name field.
If any business service or proxy service is configured to use the WS-Policy, remove the WS-Policy from the business service or proxy service.
The WS-Policy is deleted in the current session. If a business service or proxy service has been configured to use a WS-Policy, a Deletion Warning icon indicates that you can delete the WS-Policy with a warning confirmation. This might result in conflicts due to unresolved references from the service to the deleted WS-Policy.