Understanding Body Encryption in Smart Policy Smart Policy Selection for a Standalone Client

2-90 Securing WebLogic Web Services for Oracle WebLogic Server ■ Security then Performance then Compatibility SPC ■ Compatibility then Security then Performance CSP ■ Compatibility then Performance then Security CPS ■ Performance then Compatibility then Security PCS ■ Performance then Security then Compatibility PSC 3. Save and activate your changes.

2.21.2.3 Understanding Body Encryption in Smart Policy

In smart policy selection scenarios, whether or not the Body will be encrypted for example, sp:EncryptedParts sp:Body sp:EncryptedParts depends on the following policy selection preference rules: ■ Default -- The first policy alternative will be used for the determination. If the encrypted body assertion is in the first policy alternative, the body is encrypted. If the encrypted body assertion is not in the first policy alternative, the body is not encrypted. ■ SCP, SPC -- encrypted ■ PCS, PSC -- not encrypted ■ CPS -- not encrypted ■ CSP -- encrypted Consider the following two examples. In Example 2–23 , the encrypted body assertion is in the first policy alternative. Therefore, in the default preference case the body is encrypted. For policy selection preferences other than the default, the other preference rules apply. Example 2–23 Body Assertion in First Policy Alternative ?xml version=1.0? wsp:Policy xmlns:wsp=http:schemas.xmlsoap.orgws200409policy xmlns:sp=http:docs.oasis-open.orgws-sxws-securitypolicy200702 wsp:ExactlyOne sp:EncryptedParts sp:Body sp:EncryptedParts sp:EncryptedParts wsp:ExactlyOne wsp:Policy By contrast, in Example 2–24 , the encrypted body assertion is not in the first policy alternative. Therefore, in the default preference case the body is not encrypted. For policy selection preferences other than the default, the other preference rules apply. Example 2–24 Body Assertion Not in First Policy Alternative ?xml version=1.0? wsp:Policy xmlns:wsp=http:schemas.xmlsoap.orgws200409policy xmlns:sp=http:docs.oasis-open.orgws-sxws-securitypolicy200702 wsp:ExactlyOne sp:EncryptedParts Configuring Message-Level Security 2-91 sp:EncryptedParts sp:Body sp:EncryptedParts wsp:ExactlyOne wsp:Policy

2.21.2.4 Smart Policy Selection for a Standalone Client

You can set the policy selection preference via the stub property. The following example sets the stub property for security, compatibility, and performance preferences: stub._setPropertyWLStub.POLICY_SELECTION_PREFERENCE, WLStub.PREFERENCE_SECURITY_COMPATIBILITY_PERFORMANCE; If the policy selection preference is not set, then the default preference None is used.

2.21.3 Multiple Transport Assertions