Re: [sca-policy] What does this Policy @provide?

[ashok malhotra <ashok.malhotra@oracle.com>]

Following up on this morning's discussion here are a couple of 
additional usecases.
In all cases, the question is "what does a policySet wrapping this 
policy provide?"

Usecase 1
<wsp:Policy>
<wsp:ExactlyOne>
    <wsp:All>
      <!-- security assertion -->
    </wsp:All>
    <wsp:All>
       <!-- rm assertion -->
    </wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>

Usecase 2
<wsp:Policy>
<wsp:ExactlyOne>
    <wsp:All>
      <!-- MsgProt_WSS10_Alg128 Security assertion -->
    </wsp:All>
    <wsp:All>
       <!-- MsgProt_WSS11_Alg256 security assertion -->
    </wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>

Usecase 3:
<wsp:Policy>
<wsp:ExactlyOne>
    <wsp:All>
      <!-- MsgProt_WSS10 Security assertion -->
      <!-- rm_1_0 assertion ->
    </wsp:All>
    <wsp:All>
       <!-- MsgProt_WSS11 Security assertion -->
      <!-- rm_1_0 assertion ->
    </wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>


Usecase 4:
<wsp:Policy>
<wsp:ExactlyOne>
    <wsp:All>
      <!-- AuthN_SAML Security assertion -->
    </wsp:All>
    <wsp:All>
      <!-- AuthN_UserName Security assertion -->
      <!-- rm_1_1 assertion ->
    </wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>

Ashok

ashok malhotra wrote:

> Here is a question from one of the Oracle folks.
>
> Consider a policySet that includes/references the following Policy
>
> <wsp:Policy Name="combined assertions">
>   <wsp:ExactlyOne>
>     <wsp:All>
>       <!-- security assertion -->
>       <!-- rm assertion ->
>     </wsp:All>
>     <wsp:All>
>      <!-- security assertion -->
>     </wsp:All>
>   </wsp:ExactlyOne>
> </wsp:Policy>
>
> What should its @provides say?  We can dismiss this as a malformed 
> Policy but
> a possible interpretation is that it @provides security and 
> @mayProvide rm.
> Dave Booz has been wanting to have a discussion about Reuirements and 
> Capbilities.
> This example may get that started.
>
>


-- 
All the best, Ashok