Referencing WS-Policy resources within Service Registry

This section describes how WS-Policy resources (including Policy Attachments) can be associated to subjects (WSDLs), referenced from other Policy objects, and retrieved for a given subject.

To associate a policy

To associate a WS-Policy resource with the subjects to which they apply in Talend Service Registry, an External Policy Attachment mechanism is used. Further, URI Domain Expressions are used to define the scope of the policy:

<wsp:PolicyAttachment xmlns:wsp="http://www.w3.org/ns/ws-policy">
    <wsp:AppliesTo>
        <wsp:URI>xs:anyURI</wsp:URI> *
    </wsp:AppliesTo>
  ( <wsp:Policy>...</wsp:Policy>
    | <wsp:PolicyReference>...</wsp:PolicyReference> )
</wsp:PolicyAttachment>

The following describes the format for the domain expression URI according to WSDL 1.1 Element Identifiers:

<wsdl-target-namespace>#<pointer-part>

The possible Fragment Identifiers for pointer-part are:

• wsdl11.service(service)

• wsdl11.bindingOperation(binding/operation)

  Note that different namespaces and operations are presently not supported for binding.

To reference a policy

To reference an external WS-Policy document from another policy (either WS-Policy or PolicyAttachment) document, a standard Policy References mechanism is used:

<wsp:PolicyReference URI="http://some.domain/policy/samlToken.policy"/>

A Name attribute placed on the Policy root element is used to identify the WS-Policy resource within the registry, as shown below. In case a Name attribute was not provided at the time of being imported into the Talend Service Registry, one will be automatically generated with the urn:uuid schema.

<wsp:Policy Name="http://some.domain/policy/samlToken.policy">
   ...
</wsp:Policy>

To do a policy lookup

To have policy lookup operation performed successfully a resolvable in the Talend Service Registry URI should be provided in its <wsp:PolicyReference>.

Finally, a policy lookup operation contains all policy attachment documents associated with the service. All policies referenced directly (from the policy attachment document) or transitively (from referenced policies) will be embedded in the result policy attachment document. A fault is returned for the case where a referenced policy cannot be resolved.