Re: [sca-assembly] Fwd: Suggested text for Assembly 233

[ashok malhotra <ashok.malhotra@oracle.com>]

Eric, some questions inline

All the best, Ashok

On 9/28/2011 12:22 PM, Eric Johnson wrote:

Hi Ashok,

I guess I see four approaches:

1. All policy intents/policySets specified on producers/consumers/channels must match precisely. Well, maybe I'm oversimplifying it, but this seems to be the approach indicated by your email.
   
2. Policy intents/policySets set on producers/consumers/channels are independent. Each is treated as a separate policy enforcement point.

I don't understand this.  If the producer says Confidentiality and the Channel says NoConfidentiality
what happens?  Can the producer connect to that channel?

1. Only allow policy intents/policySets on channels.

I considered this.  I think it's quite reasonable for the consumer to just use the Channel's policies.
But producers are autonomous and I think they will set policies without consideration of what channels
they are going to be connected to.  Perhaps you need to explain this a bit more.

1. Punt on the problem.

I think we need to say something.  I'm happy to say as little as possible.