Re: [soa-rm-ra] Comment on the notion of Policy

[Ken Laskey <klaskey@mitre.org>]

To take this a step further, policy is often referred to in the context of event-condition-action (ECA) where an event triggers the evaluation of the conditions and may lead to actions if the conditions are satisfied.� That said, the RM is explicit in discussing the condition and the event (e.g. you decided to look into using my service) and the action (e.g. I will let you use my service) are only implied.�

Ken

On Jul 19, 2006, at 1:27 PM, Namjoshi, Jyoti wrote:

I missed the discussion and reasoning gone into choosing the definition

and description of the Policy that appears on the Wiki page

http://wiki.oasis-open.org/soa-rm/TheArchitecture/Policy (probably it

comes from the way WS-Policy framework uses it).

Instead of looking at Policy merely as a "Constraint" or "Condition",

the representation of Policy should be a condition-action pair:

When Conditions <A, B, C,..> exist, then Do <these actions>

Conditions part may probably be even optional in case of some policies.

PDP and PEP will still apply.

Authorization, access-control policies can be subset of the set of

policies applicable for a service.

Does someone have a set of representative examples of Policies

applicable to services (as capabilities) that are consumed

programmatically?

Thanks and regards,

Jyoti�

------------------------------------------------------------------------------------------

Ken Laskey

MITRE Corporation, M/S H305 � � phone:� 703-983-7934

7515 Colshire Drive� � � � � � � � � � � � fax:� � � � 703-983-1379

McLean VA 22102-7508