Re: [soa-rm-ra] Comment on the notion of Policy

[Ken Laskey <klaskey@mitre.org>]

To take this a step further, policy is often referred to in the context of event-condition-action (ECA) where an event triggers the evaluation of the conditions and may lead to actions if the conditions are satisfied.  That said, the RM is explicit in discussing the condition and the event (e.g. you decided to look into using my service) and the action (e.g. I will let you use my service) are only implied. 

Ken

On Jul 19, 2006, at 1:27 PM, Namjoshi, Jyoti wrote:

I missed the discussion and reasoning gone into choosing the definition

and description of the Policy that appears on the Wiki page

http://wiki.oasis-open.org/soa-rm/TheArchitecture/Policy (probably it

comes from the way WS-Policy framework uses it).

Instead of looking at Policy merely as a "Constraint" or "Condition",

the representation of Policy should be a condition-action pair:

When Conditions <A, B, C,..> exist, then Do <these actions>

Conditions part may probably be even optional in case of some policies.

PDP and PEP will still apply.

Authorization, access-control policies can be subset of the set of

policies applicable for a service.

Does someone have a set of representative examples of Policies

applicable to services (as capabilities) that are consumed

programmatically?

Thanks and regards,

Jyoti 

------------------------------------------------------------------------------------------

Ken Laskey

MITRE Corporation, M/S H305     phone:  703-983-7934

7515 Colshire Drive                        fax:        703-983-1379

McLean VA 22102-7508