<style>
/* Changing the layout to use less space for mobiles */
@media screen and (max-device-width: 480px), screen and (-webkit-min-device-pixel-ratio: 2) {
#email-body { min-width: 30em !important; }
#email-page { padding: 8px !important; }
#email-banner { padding: 8px 8px 0 8px !important; }
#email-avatar { margin: 1px 8px 8px 0 !important; padding: 0 !important; }
#email-fields { padding: 0 8px 8px 8px !important; }
#email-gutter { width: 0 !important; }
}
</style>
<div id="email-body">
<table id="email-wrap" align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#f0f0f0;color:#000000;width:100%;">
<tr valign="top">
<td id="email-page" style="padding:16px !important;">
<table align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#ffffff;border:1px solid #bbbbbb;color:#000000;width:100%;">
<tr valign="top">
<td bgcolor="#3b4d64" style="background-color:#3b4d64;color:#ffffff;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;line-height:1;"><img src="https://issues.jboss.org/s/en_USbeh5ai-1988229788/6109/58/_/jira-logo-scaled.png" alt="" style="vertical-align:top;" /></td>
</tr><tr valign="top">
<td id="email-banner" style="padding:32px 32px 0 32px;">
<table align="left" border="0" cellpadding="0" cellspacing="0" width="100%" style="width:100%;">
<tr valign="top">
<td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;padding:0;">
<img id="email-avatar" src="https://community.jboss.org/people/dward/avatar/16.png" alt="" height="48" width="48" border="0" align="left" style="padding:0;margin: 0 16px 16px 0;" />
<div id="email-action" style="padding: 0 0 8px 0;font-size:12px;line-height:18px;">
<a class="user-hover" rel="dward" id="email_dward" href="https://issues.jboss.org/secure/ViewProfile.jspa?name=dward" style="color:#3b73af;">David Ward</a>
created <img src="https://issues.jboss.org/images/icons/issuetypes/task.png" height="16" width="16" border="0" align="absmiddle" alt="Task"> <a style='color:#3b73af;text-decoration:none;' href='https://issues.jboss.org/browse/SWITCHYARD-1772'>SWITCHYARD-1772</a>
</div>
<div id="email-summary" style="font-size:16px;line-height:20px;padding:2px 0 16px 0;">
<a style='color:#3b73af;text-decoration:none;' href='https://issues.jboss.org/browse/SWITCHYARD-1772'><strong>authorization security policy needs to move to implementation</strong></a>
</div>
</td>
</tr>
</table>
</td>
</tr>
<tr valign="top">
<td id="email-fields" style="padding:0 32px 32px 32px;">
<table border="0" cellpadding="0" cellspacing="0" style="padding:0;text-align:left;width:100%;" width="100%">
<tr valign="top">
<td id="email-gutter" style="width:64px;white-space:nowrap;"></td>
<td>
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Issue Type:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<img src="https://issues.jboss.org/images/icons/issuetypes/task.png" height="16" width="16" border="0" align="absmiddle" alt="Task"> Task
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Affects Versions:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
1.1 </td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Assignee:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<a class="user-hover" rel="bfitzpat" id="email_bfitzpat" href="https://issues.jboss.org/secure/ViewProfile.jspa?name=bfitzpat" style="color:#3b73af;">Brian Fitzpatrick</a>
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Components:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
tooling </td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Created:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
14/Oct/13 2:05 PM
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Description:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<p style='margin-top:0;margin-bottom:10px;'>SwitchYard's SecurityPolicy defines 3 intents: confidentiality, clientAuthentication, and authorization. Previously, all 3 were marked as interaction policy types. However, according to the spec, "authorization" is actually an implementation policy type. As of <a href="https://issues.jboss.org/browse/SWITCHYARD-1729" title="Security context is not propagated between service calls" class="issue-link" data-issue-key="SWITCHYARD-1729">SWITCHYARD-1729</a>, the runtime has been fixed to re-align to this.</p>
<p style='margin-top:0;margin-bottom:10px;'>The tooling needs to change to. When checking the checkboxes for the security policies, the confidentiality and clientAuthentication selections can remain as attributes being added to the space-delimited value of the requires attribute of the service element. However, when checking the authorization policy, it should be added to the space-delimited value of the requires attribute of the implementation.<span class="error">[impl]</span> element (where "<span class="error">[impl]</span>" could be bean, for example).</p>
<p style='margin-top:0;margin-bottom:10px;'>Here is an example from <a href="https://issues.jboss.org/browse/SWITCHYARD-1729" title="Security context is not propagated between service calls" class="issue-link" data-issue-key="SWITCHYARD-1729">SWITCHYARD-1729</a>'s new policy-security-basic-propagate quickstart:</p>
<p style='margin-top:0;margin-bottom:10px;'> <composite xmlns="http://docs.oasis-open.org/ns/opencsa/sca/200912" name="policy-security-basic-propagate" targetNamespace="urn:switchyard-quickstart-demo:policy-security-basic-propagate:0.1.0"><br/>
<service name="WorkService" promote="WorkService"><br/>
<interface.wsdl interface="META-INF/WorkService.wsdl#wsdl.porttype(WorkService)"/><br/>
<binding.soap xmlns="urn:switchyard-component-soap:config:1.0"><br/>
<wsdl>META-INF/WorkService.wsdl</wsdl><br/>
<contextPath>policy-security-basic-propagate</contextPath><br/>
</binding.soap> </service><br/>
<component name="WorkService"><br/>
<implementation.bean xmlns="urn:switchyard-component-bean:config:1.0" class="org.switchyard.quickstarts.demo.policy.security.basic.propagate.WorkServiceBean" requires="authorization"/><br/>
<service name="WorkService" requires="confidentiality clientAuthentication"><br/>
<interface.java interface="org.switchyard.quickstarts.demo.policy.security.basic.propagate.WorkService"/><br/>
</service><br/>
<reference name="BackEndService"><br/>
<interface.java interface="org.switchyard.quickstarts.demo.policy.security.basic.propagate.BackEndService"/><br/>
</reference> </component><br/>
<component name="BackEndService"><br/>
<implementation.bean xmlns="urn:switchyard-component-bean:config:1.0" class="org.switchyard.quickstarts.demo.policy.security.basic.propagate.BackEndServiceBean" requires="authorization"/><br/>
<service name="BackEndService" requires="confidentiality clientAuthentication"><br/>
<interface.java interface="org.switchyard.quickstarts.demo.policy.security.basic.propagate.BackEndService"/><br/>
</service><br/>
</component><br/>
</composite> </p>
<p style='margin-top:0;margin-bottom:10px;'>You can see that requires="confidentiality clientAuthentication" is on the service element, and requires="authorization" is on the implementation.bean element.</p>
</td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Fix Versions:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
1.1 </td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Project:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<a style="color:#3b73af;" href="https://issues.jboss.org/browse/SWITCHYARD">SwitchYard</a>
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Priority:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<img src="https://issues.jboss.org/images/icons/priorities/major.png" height="16" width="16" border="0" align="absmiddle" alt="Major"> Major
</td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Reporter:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<a class="user-hover" rel="dward" id="email_dward" href="https://issues.jboss.org/secure/ViewProfile.jspa?name=dward" style="color:#3b73af;">David Ward</a>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td><!-- End #email-page -->
</tr>
<tr valign="top">
<td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:10px;line-height:14px;padding: 0 16px 16px 16px;text-align:center;">
This message is automatically generated by JIRA.<br />
If you think it was sent incorrectly, please contact your JIRA administrators<br />
For more information on JIRA, see: <a style='color:#3b73af;' href='http://www.atlassian.com/software/jira'>http://www.atlassian.com/software/jira</a>
</td>
</tr>
</table><!-- End #email-wrap -->
</div><!-- End #email-body -->