Configuration Guides › Policy Server Configuration Guide › Configure Security Policies Using Policy Domains and Policy Domain Objects › How to Identify a Web Service Resource by Agent, Realm, and Rule

How to Identify a Web Service Resource by Agent, Realm, and Rule

The Resource field in a SOA Security Manager rule specifies the resource that is the subject of the rule. The complete resource specification (shown by the Effective Resource field on the Rule dialog box) is a concatenation of the values of the Agent, the Resource Filter of the parent realm (or realms in a nested realm environment), and the Resource field of the rule itself:

[agent] [realm_resource_filter] [rule_resource]

agent

Specifies a SOA Agent that monitors a server or gateway that contains one or more realms of protected web service resources.

realm_resource_filter

Specifies a string that specifies the resources covered by the realm. If the realm is a top-level realm, specify the resources relative to the server that serves up the files or application. If the realm is nested, specify the resources relative to the parent realm.

rule_resource

Specifies a string or regular expression that specifies the resources to which the rule applies. Specify the resources relative to the realm containing the resource. You can use wildcards (for example, "*") to broaden the specification of a rule.