Method and system for synchronized policy control in a web services environment

摘要: Access controls for a Web service (which are based on abstract WSDL definitions) defined protected object space and, as such, loosely coupled with the concrete binding derived from those definitions, preferably per level. This WSDL-defined POS is in turn bound to resource-specific definition. loose coupling leveraged allow changes (e.g., updates) binding's be transitively applied application-specific space. If appropriate, may WSDL's Thus, according invention, one-way (typically, resource level POS) or two-way (from and vice versa). technique ensures that different security policies not unintentionally same (for example, one at services entry level, other level). By synchronizing spaces manner described, neither entity deploys application nor administrator need aware of differences between request request.