Priority assignments for policy attachments

摘要

Techniques for resolving conflicts between web service policies that are attached (via LPA and/or GPA metadata) to a policy subject (e.g., a WS client/service endpoint). In one set of embodiments, a priority value can be assigned to each policy attached to a policy subject via the policy's corresponding policy attachment metadata file. These priority values can be taken into account when determining whether one policy should be given precedence over another, conflicting policy attached to the same policy subject. In certain embodiments, as part of this determination, the priority value of a policy can be given greater weight than the scope at which the policy is attached.

主权项

1. A method for controlling execution behavior of policy subjects, the method comprising:
retrieving, by a computer system, policy attachment information identifying a plurality of web service policies whose policy attachment metadata indicate attachment at runtime to a policy subject, wherein the policy attachment information comprises, for each web service policy in the plurality of web service polices, an identifier of the web service policy, a scope at which the web service policy is attached to the policy subject at runtime, and a priority value; determining, by the computer system, an ordering of each web service policy in the plurality of web service policies based on the priority value of the web service policy and the scope at which the web service policy is attached to the policy subject; determining, by the computer system, that a first web service policy in the plurality of web service policies is given precedence over a second web service policy in the plurality of web service policies based on the determined ordering, wherein attachment of the first web service policy and the second web service policy at the policy subject conflict; adding, by the computer system, the first web service policy to an effective policy set of the policy subject, the effective policy set comprising policies enforced at the policy subject at runtime; and performing one or more actions that control execution behavior of the policy subject based the effective policy set.