Hi,

> A bit of a hack but I just put a copy of an
> org.apache.cxf.ws.policy.PolicyVerificationInInterceptor in my src that does
> nothing in it's handle() method :)
> 
> Is there a better way to provide an override for a CXF class such as this?
> 

Yep, really a bit hack :). 
As better way I see following:
1. Configure policy via WSDL and only referring to a policy from the 
"wsdl:output", as Colm suggested.
2. Set empty policy in PolicyConstants.POLICY_OVERRIDE in custom interceptor 
called before PolicyInInterceptor
3. Remove all policy relevant interceptors from chain in custom interceptor 
called before PolicyInInterceptor

Regards,
Andrei.

> 
> 
> --
> View this message in context: http://cxf.547215.n5.nabble.com/How-to-
> stop-WS-Security-policy-being-applied-to-inbound-message-
> tp5732575p5732848.html
> Sent from the cxf-user mailing list archive at Nabble.com.

Reply via email to