Securing WSIF
The steps to be taken to enable the Web Services Invocation Framework (WSIF) to interact with a security manager.
About this task
WSIF interacts with a security manager in the following
ways:
- WSIF runs in the Java™ Platform, Enterprise Edition (Java EE) security context without modification.
- When WSIF is run under a Java EE container, port implementations can use the security context to pass on security tokens or credentials as necessary.
- WSIF implementations can automatically convert Java EE security context into appropriate context for onward services.
For WSIF to interact effectively with the WebSphere® Application Server security manager, complete the following step:
Procedure
To load the Web Services Description Language (WSDL) file,
enable the FilePermission attribute in the
was.policy
file.
This permission is required when a WSDL file is referred to
using the
file://
protocol.