Copyright © 2011, 2015, Oracle and/or its affiliates. All rights reserved.
This image illustrates how to use a Security Module with the Policy Distribution Component.
Security Modules with controlled-pull mode are configured with direct access to the policy store and therefore do not maintain a local policy file cache. Controlled distribution means that the policy changes pulled from the Security Module are transactional so that all policy changes must be distributed before they can be committed.
Security Modules with non-controlled pull mode have direct access to the policy store and do not maintain a local policy file cache. Non-controlled distribution mode is not transactional and incomplete changes can be pulled.