Re: [Carbon-dev] Restricting access to service metadata (WSDL, schema, policy)

2011-01-11 Thread Afkham Azeez
On Tue, Jan 11, 2011 at 8:15 AM, Amila Suriarachchi am...@wso2.com wrote: On Mon, Jan 10, 2011 at 10:05 PM, Afkham Azeez az...@wso2.com wrote: This requirement is different. In the case of some organizations, the WSDL is copyrighted and distributed out of band. People who get access to

[Carbon-dev] Restricting access to service metadata (WSDL, schema, policy)

2011-01-10 Thread Afkham Azeez
As per https://issues.apache.org/jira/browse/AXIS2-3316 I have implemented this functionality where you can add the parameter name=exposeServiceMetadatafalse/parameter parameter to the axis2.xml or services.xml file in order to restrict access to the service metadata. Adding the parameter to

Re: [Carbon-dev] Restricting access to service metadata (WSDL, schema, policy)

2011-01-10 Thread Prabath Siriwardana
+1 This is a very useful feature Thanks regards, -Prabath On Mon, Jan 10, 2011 at 5:10 PM, Afkham Azeez az...@wso2.com wrote: As per https://issues.apache.org/jira/browse/AXIS2-3316 I have implemented this functionality where you can add the parameter

Re: [Carbon-dev] Restricting access to service metadata (WSDL, schema, policy)

2011-01-10 Thread Prabath Siriwardana
On Mon, Jan 10, 2011 at 7:44 PM, Amila Suriarachchi am...@wso2.com wrote: hi, First I think just restricting access to a service meta data won't make any thing secure. But - it makes things harder - specially in the case where a security policy being attached.. One can argue that this

Re: [Carbon-dev] Restricting access to service metadata (WSDL, schema, policy)

2011-01-10 Thread Afkham Azeez
This requirement is different. In the case of some organizations, the WSDL is copyrighted and distributed out of band. People who get access to these WSDLs may need to sign a NDA. So, in their deployment, they would allow authorized users to call the service, but they do not want anybody to get

Re: [Carbon-dev] Restricting access to service metadata (WSDL, schema, policy)

2011-01-10 Thread Senaka Fernando
On Mon, Jan 10, 2011 at 10:05 PM, Afkham Azeez az...@wso2.com wrote: This requirement is different. In the case of some organizations, the WSDL is copyrighted and distributed out of band. People who get access to these WSDLs may need to sign a NDA. So, in their deployment, they would allow

Re: [Carbon-dev] Restricting access to service metadata (WSDL, schema, policy)

2011-01-10 Thread Afkham Azeez
On Mon, Jan 10, 2011 at 10:01 PM, Prabath Siriwardana prab...@wso2.comwrote: On Mon, Jan 10, 2011 at 7:44 PM, Amila Suriarachchi am...@wso2.comwrote: hi, First I think just restricting access to a service meta data won't make any thing secure. But - it makes things harder - specially

Re: [Carbon-dev] Restricting access to service metadata (WSDL, schema, policy)

2011-01-10 Thread Prabath Siriwardana
On Mon, Jan 10, 2011 at 10:19 PM, Afkham Azeez az...@wso2.com wrote: On Mon, Jan 10, 2011 at 10:01 PM, Prabath Siriwardana prab...@wso2.comwrote: On Mon, Jan 10, 2011 at 7:44 PM, Amila Suriarachchi am...@wso2.comwrote: hi, First I think just restricting access to a service meta data

Re: [Carbon-dev] Restricting access to service metadata (WSDL, schema, policy)

2011-01-10 Thread Prabath Siriwardana
Also - IIRC in asmx web services by default the wsdl is accessible only from the localhost.. Thanks regards, -Prabath On Mon, Jan 10, 2011 at 10:38 PM, Afkham Azeez az...@wso2.com wrote: FYI, IIS supports something similar. e.g. webServices wsdlHelpGenerator href=helpPage.aspx/ protocols

Re: [Carbon-dev] Restricting access to service metadata (WSDL, schema, policy)

2011-01-10 Thread Amila Suriarachchi
On Mon, Jan 10, 2011 at 10:05 PM, Afkham Azeez az...@wso2.com wrote: This requirement is different. In the case of some organizations, the WSDL is copyrighted and distributed out of band. People who get access to these WSDLs may need to sign a NDA. So, in their deployment, they would allow