Re: [soa-rm] Security

[Duane Nickull <dnickull@adobe.com>]

Instead of
"Service policy may mandate security requirements to be met, and if they 
are not, interaction may be refused"

perhaps

"Service policy may mandate security requirements, and if they are not 
met, service invocation/consumption may be refused"

Rationale:

"interaction" is not the best word since refusing to allow a service to 
be invoked is in itself an interaction.

Other thoughts:

A logical service policy is always present, even if the specific policy 
states you may access the service without presenting further credentials 
or tokens.  That, ipso facto, is a security policy, much the same as no 
explicit contract is still a contract.

Duane

-- 
***********
Senior Standards Strategist - Adobe Systems, Inc. - http://www.adobe.com
Vice Chair - UN/CEFACT Bureau Plenary - http://www.unece.org/cefact/
Adobe Enterprise Developer Resources  - http://www.adobe.com/enterprise/developer/main.html
***********