Issue 48: Revised Proposal

["Tony Gullotta" <tony.gullotta@soa.com>]

Here is another cut at a solution to Issue 48. The proposed text is based on http://www.oasis-open.org/apps/org/workgroup/ws-sx/download.php/17888/ws-securitypolicy-1.2-spec-ed-01-r06-diff.pdf.

 

 

Section 7.4 lines 1670 - 1671 should be changed from:

This assertion MUST apply to [Endpoint Policy Subject].

to:

This assertion SHOULD apply to [Endpoint Policy Subject]. This assertion MAY apply to [Operation Policy Subject].

 

 

Section 7.5 line 1766 should be changed from:

This assertion MUST apply to [Endpoint Policy Subject].

to:

This assertion SHOULD apply to [Endpoint Policy Subject]. This assertion MAY apply to [Operation Policy Subject].

 

 

At the end of the intro to Appendix A on line 2441 add the following:

 

Unless otherwise noted, any assertion that is listed under multiple [Policy Subjects] below MUST only apply to only one [Policy Subject] in a WSDL 1.1 hierarchy for calculating an Effective Policy.

 

 

The following should be added after line 2463 in Appendix A:

A.2.2 Security Binding Assertions

SymmetricBindingAssertion (8.4)
AsymmetricBindingAssertion (8.5)