Instead of
"Service policy may mandate security requirements to be met, and if they
are not, interaction may be refused"
perhaps
"Service policy may mandate security requirements, and if they are not
met, service invocation/consumption may be refused"
Rationale:
"interaction" is not the best word since refusing to allow a service to
be invoked is in itself an interaction.
Other thoughts:
A logical service policy is always present, even if the specific policy
states you may access the service without presenting further credentials
or tokens. That, ipso facto, is a security policy, much the same as no
explicit contract is still a contract.
Duane
--
***********
Senior Standards Strategist - Adobe Systems, Inc. - http://www.adobe.com
Vice Chair - UN/CEFACT Bureau Plenary - http://www.unece.org/cefact/
Adobe Enterprise Developer Resources - http://www.adobe.com/enterprise/developer/main.html
***********
