This text file contains sample code fragments from:
Section 16.2 - Nested and Parameterized Assertions
Chapter 16 - Advanced WS-Policy Part I: Policy Centralization and Nested, Parameterized, and Ignorable Assertions
Book - Web Service Contract Design & Versioning for SOA
Series - The Prentice Hall Service Technology Series from Thomas Erl
Site - www.servicetechbooks.com


<wsp:Policy>
  <wsp:ExactlyOne>
    <wsp:All>
      <ex:Assertion1>
        <wsp:Policy>
          <wsp:ExactlyOne>
            <wsp:All>
              <ex:Assertion2/>
            </wsp:All>
          </wsp:ExactlyOne>
        </wsp:Policy>
      </ex:Assertion1>
    </wsp:All>
  </wsp:ExactlyOne>
</wsp:Policy>

Example 16.10 - One assertion nested within another.


<wsp:Policy>
  <wsp:ExactlyOne>
    <wsp:All>
      <ex:Assertion1>
        <ex:Assertion2/>
      </ex:Assertion1>
    </wsp:All>
  </wsp:ExactlyOne>
</wsp:Policy>

Example 16.11 - An attempt at nesting an assertion that does not result in an actual, nested assertion.


<wsp:Policy>
  <argt:responseGuarantee>
    <argt:responseInMilliseconds>
      50
    </argt:responseInMilliseconds>
  </argt:responseGuarantee>
</wsp:Policy>

Example 16.12 - A parameterized argt:responseGuarantee policy assertion.


<wsp:Policy Name="http://actioncon.com/policies/finance">
  <wsp:ExactlyOne>
    <sp:TransportBinding/>
    <sp:SymmetricBinding/>
  </wsp:ExactlyOne>
</wsp:Policy>

Example 16.13 - The policy expression from the domain policy definition now comprised of a policy alternative offering a choice between two security-related assertions.


<wsp:Policy Name="http://actioncon.com/policies/finance">
  <wsp:ExactlyOne>
    <sp:TransportBinding>
      <wsp:Policy>
        <sp:TransportToken>
          <wsp:Policy>
            <sp:HttpsToken>
              ...tokens...
            </sp:HttpsToken>
          </wsp:Policy>
        </sp:TransportToken>
      <sp:IncludeTimestamp/>
      <sp:AlgorithmSuite>
        <wsp:Policy>
          <sp:Basic256/>
        </wsp:Policy>
      </sp:AlgoritmSuite>
    </wsp:Policy>
  </sp:TransportBinding>
  ...
</wsp:Policy>

Example 16.14 - 
The sp:TransportBinding policy assertion containing three nested policy assertions.


<wsp:Policy Name="http://actioncon.com/policies/finance">
  <wsp:ExactlyOne>
    ...
    <sp:SymmetricBinding>
      <wsp:Policy>
        <sp:ProtectionToken>
          <wsp:Policy>
            <sp:X509Token sp:IncludeToken=
              "http://schemas.xmlsoap.org/ws/2005
              /07/securitypolicy/IncludeToken/Never">
              <wsp:Policy>
                ...details of X509 token...
              </wsp:Policy>
            </sp:X509Token>
          </wsp:Policy>
        </sp:ProtectionToken>
        <sp:AlgorithmSuite>
          <wsp:Policy>
            <sp:Basic256/>
          </wsp:Policy>
        </sp:AlgorithmSuite>
        <sp:Layout>
          ...layout details...
        </sp:Layout>
        <sp:IncludeTimestamp/>
        <sp:OnlySignEntireHeadersAndBody/>
      </wsp:Policy>
    </sp:SymmetricBinding>
  </sp:ExactlyOne>
</wsp:Policy>

Example 16.15 - The sp:SymmetricBinding policy assertion containing seven nested policy assertions.


<wsp:Policy Name="http://actioncon.com/policies/finance">
  <wsp:ExactlyOne>
    <sp:TransportBinding>
      <wsp:Policy>
        <sp:TransportToken/>
          <wsp:Policy>
            <sp:HttpsToken>
              ...tokens...
            </sp:HttpsToken>
          </wsp:Policy>
        </sp:TransportToken>
        <sp:IncludeTimestamp/>
        <sp:AlgorithmSuite>
          <wsp:Policy>
            <sp:Basic256/>
          </wsp:Policy>
        </sp:AlgoritmSuite>
      </wsp:Policy>
    </sp:TransportBinding>
    <sp:SymmetricBinding>
      <wsp:Policy>
        <sp:ProtectionToken>
          <wsp:Policy>
            <sp:X509Token sp:IncludeToken=
              "http://schemas.xmlsoap.org/ws/2005
              /07/securitypolicy/IncludeToken/Never">
              <wsp:Policy>
                ...details of X509 token...
              </wsp:Policy>
            </sp:X509Token>
          </wsp:Policy>
        </sp:ProtectionToken>
        <sp:AlgorithmSuite>
          <wsp:Policy>
            <sp:Basic256/>
          </wsp:Policy>
        </sp:AlgorithmSuite>
          <sp:Layout>
            ...layout details...
          </sp:Layout>
        <sp:IncludeTimestamp/>
        <sp:OnlySignEntireHeadersAndBody/>
      </wsp:Policy>
    </sp:SymmetricBinding>
  </sp:ExactlyOne>
</wsp:Policy>

Example 16.16 - A policy expression comprised of two security-related policy alternatives.