[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: Validation - Is it worth it ?

• To: xml-dev@l...
• Subject: Re: Validation - Is it worth it ?
• From: "Fraser Goffin" <goffinf@h...>
• Date: Sat, 11 Feb 2006 14:02:06 +0000
• Bcc:
• In-reply-to: <OF539DD36F.BB4022FA-ON85257112.0049C042-85257112.004B3424@u...>

>Not many systems meet those criteria.

Agreed (as stated).

But the conundrum (if there is one) can also be viewed as :-

a. I want to exercise [some] control over messages that arrive at the 
service interface so that I have a reasonable degree of confidence that the 
message is 'business processable' and that (as you say) there is confidence 
that exploitation of the service will be caught by the business rules that 
provide the actual implementation.

b. I want consumers to call my service (I want to do business)

c. I want to minimise message rejection where (a) is true.

d. I want calling my service to be EASY for consumers (re: Tim Ewald's 
notion of 'make it easy for people to pay you ' :-).

e. That the service is not just a slave to a technical contract which is 
actually expressed more strictly than the actual business process.

Sometimes I think about this as the difference between 'compatible' messages 
versus those which strictly adhere to a technical specification. Perhaps its 
really to do with how closely that specification mirrors the business 
requirements for the service that 'we' want to implement (given, as I said 
in my original post, that the contract is owned by an external body) ?

Fraser.

>From: Richard Salz <rsalz@u...>
>To: "Fraser Goffin" <goffinf@h...>
>CC: xml-dev@l...
>Subject: Re:  Validation - Is it worth it ?
>Date: Sat, 11 Feb 2006 08:41:28 -0500
>
>If you are positive that your software will do the right thing with
>malformed messages, and you are sure that nobody will ever try to exploit
>any possible bugs or mis-interpretations that might occur, and that nobody
>will ever assign semantics to those messages in the future, then don't
>bother to validate.
>
>Not many systems meet those criteria.
>
>         /r$
>
>--
>SOA Appliance Group
>IBM Application Integration Middleware
>
>
>-----------------------------------------------------------------
>The xml-dev list is sponsored by XML.org <http://www.xml.org>, an
>initiative of OASIS <http://www.oasis-open.org>
>
>The list archives are at http://lists.xml.org/archives/xml-dev/
>
>To subscribe or unsubscribe from this list use the subscription
>manager: <http://www.oasis-open.org/mlmanage/index.php>
>

• Follow-Ups:
  • Re: Validation - Is it worth it ?
    • From: Rick Jelliffe <rjelliffe@a...>
  • RE: Validation - Is it worth it ?
    • From: "Greg Alvord" <greg.alvord@c...>

• References:
  • Re: Validation - Is it worth it ?
    • From: Richard Salz <rsalz@u...>

• Prev by Date: RE: Status of ISO Schematron
• Next by Date: Re: Validation - Is it worth it ?
• Previous by thread: Re: Validation - Is it worth it ?
• Next by thread: RE: Validation - Is it worth it ?
• Index(es):
  • Date
  • Thread