What Are Policies? What are Policy Sets?

2 Attaching Policies to Oracle Infrastructure Web Services 2-1 2 Attaching Policies to Oracle Infrastructure Web Services This chapter describes how to attach policies to Oracle Infrastructure Web services. ■ Section 2.1, What Are Policies? ■ Section 2.2, What are Policy Sets? ■ Section 2.3, Oracle WSM Predefined Policies and Assertion Templates ■ Section 2.4, Attaching Policies to Web Services Using Annotations ■ Section 2.5, Attaching Policies Using Oracle JDeveloper ■ Section 2.6, Attaching Policies Using Oracle Enterprise Manager ■ Section 2.7, Attaching Policies Using WebLogic Scripting Tool WLST 2.1 What Are Policies? Policies describe the capabilities and requirements of a Web service such as whether and how a message must be secured, whether and how a message must be delivered reliably, and so on. Oracle Fusion Middleware 11g Release 1 11.1.1 supports the types of policies defined in Table 2–1 . Table 2–1 Types of Policies Policy Description WS-ReliableMessaging Reliable messaging policies that implement the WS-ReliableMessaging standard describes a wire-level protocol that allows guaranteed delivery of SOAP messages, and can maintain the order of sequence in which a set of messages are delivered. The technology can be used to ensure that messages are delivered in the correct order. If a message is delivered out of order, the receiving system can be configured to guarantee that the messages will be processed in the correct order. The system can also be configured to deliver messages at least once, not more than once, or exactly once. If a message is lost, the sending system re-transmits the message until the receiving system acknowledges it receipt. Management Management policies that log request, response, and fault messages to a message log. Management policies may include custom policies. 2-2 Concepts Guide for Oracle Infrastructure Web Services 2.2 What are Policy Sets? A policy set, which can contain multiple policy references, is an abstract representation that provides a means to attach policies globally to a range of subjects of the same type. Attaching policies globally using policy sets provides a mechanism for the administrator to ensure that all subjects are secured in situations where the developer, assembler, or deployer did not explicitly specify the policies to be attached. Policies that are attached using a policy set are considered externally attached. Policy subjects to which policy sets can be attached include SOA components, SOA service endpoints, SOA references, Web services endpoints, Web service clients, Web service connections, and asynchronous callback clients. Policy sets can be attached at the following scopes: ■ Domain — all services in a domain ■ Server instance—all services in a server instance ■ Application—all services in an application ■ SOA composite—all services in a SOA composite ■ Application Module—all services in an application module For details about using policy sets to globally attach policies, see Attaching Policies Globally Using Policy Sets in Security and Administrators Guide for Web Services.

2.3 Oracle WSM Predefined Policies and Assertion Templates