WS Policy Support

[Dave Sowerby <da...@gmail.com>]

Hi Guys,

I'm currently in process of trying to identify whether a set of
WS-Policy specifications are or could be supported by Tuscany.

I've tried taking a look through the code/samples/docs, but can't
really see anything definitive.

The policies I'm interested in are:

WS-ReliableMessaging
WS-Security
WS-Atomic Transaction

Could anyone comment on their support/potential support?  Also, if
they are present (or if there is an obvious route for support), their
versions?

Cheers,

Dave.

Re: WS Policy Support

[Simon Laws <si...@googlemail.com>]

Hi Dave

Currently in 1.x there is some support for WS-Security. You can use
the <tuscany:wsConfigParam> or <wsp:Policy/> polices to configure
binding.ws for, I believe, authentication, integrity and
confidentiality. Under the covers this enables the Rampart module [1]
of Axis2 (on which our web services binding is based) which in turn
puts the appropriate WS-Security headers in the SOAP envelopes and
reads them back in at the service end. I can't say how complete w.r.t
the specs this support is as we are somewhat dependent on what Rampart
provides. There is an example of this in use in Tuscany to provide
integrity at [2].

We don't have any support currently for WS-ReliableMessaging or
WS-AtomicTransaction. There is function in the Axis2 Sandesha project
that provides some support for the reliable messaging specifications
but we don't exploit it. We do have the SCA transaction policy model
in the 1.x code base but again no runtime implementation.

A couple of people in the community have asked about transaction
support previously but nothing has got off the ground yet. This is the
first time reliable messaging has come up AFAIK. I guess future
support depends on who in the community wants the features and who is
prepared to help out. Thoughts anyone?

Regards

Simon

[1] http://ws.apache.org/axis2/modules/rampart/1_2/security-module.html
[2] http://svn.apache.org/repos/asf/tuscany/branches/sca-java-1.x/samples/helloworld-ws-service-secure/