This image illustrates how the Oracle Entitlements Server Policy Distribution Component works.

Security Modules configured with this policy distribution mode access a local file as a cache of the policy data after policies have been distributed either manually from the Oracle Entitlements Server Administration Console or programmatically by an application executing the appropriate management APIs calls. Controlled distribution means that the policy changes pushed from the Security Module are transactional so that all policy changes must be distributed before they can be committed. Security Modules with controlled-push mode do not have direct access to the policy store.