how do we distinguish outsourced operation invocations

[Nariman Ammar]

Hello,

How can i parse a BPEL process and find the outsourced invocations vs. the local ones.

Thanks 

[Antonio García Domínguez]

Hi Nariman,

Could you provide more details on what "outsourced" means? A concrete example would be useful.

Kind regards,

Antonio

--
Sie erhalten diese Nachricht, weil Sie in Google Groups E-Mails von der Gruppe "BPELUnit" abonniert haben.
Wenn Sie sich von dieser Gruppe abmelden und keine E-Mails mehr von dieser Gruppe erhalten möchten, senden Sie eine E-Mail an bpelunit+u...@googlegroups.com.
Weitere Optionen finden Sie unter https://groups.google.com/d/optout.

[Nariman Ammar]

For example, in an outsourced telemarketing call/activity, a marketing company could contact several bank services asking for customer information. In this case, the bank services are outsourcing the data about their customers based on customers agreement.

that could be done in a bpel process of subsequent activities each of which invokes one of the bank services.

--
Sie erhalten diese Nachricht, weil Sie in Google Groups ein Thema der Gruppe "BPELUnit" abonniert haben.
Wenn Sie sich von diesem Thema abmelden möchten, rufen Sie https://groups.google.com/d/topic/bpelunit/AqWjUA4wH8c/unsubscribe auf.
Wenn Sie sich von dieser Gruppe und allen Themen dieser Gruppe abmelden möchten, senden Sie eine E-Mail an bpelunit+u...@googlegroups.com.

Weitere Optionen finden Sie unter https://groups.google.com/d/optout.

--

Sincerely Yours,
Nariman Ammar

[Antonio García Domínguez]

Hi Nariman,

Sorry, let me rephrase: could you provide a concrete example in terms of BPEL code?

BPEL does not know whether the service you're invoking is internal or external: the only thing I could think of would be looking at the address of the service you're invoking and seeing if it's within your organization or not.

Kind regards,

Antonio

[Daniel Lübke]

Hi,

I am still very uncertain what the main research goal of your project is but my feeling tells me that you should check the underlying technologies and concepts a bit more first.

1.) From the BPEL model itself you cannot find the target information of a service invocation because BPEL uses only the protocol-independent parts of the WSDL; except when you override the partner link information with WS-A information (see your other question),
2.) The deployment descriptor will specify the mapping of physical endpoints for every partner link. So the first step that you need to do is to check the deployment descriptor. Those are very product-specific and not standardized.
3.) The endpoint configured in the deployment descriptor can be pointing to an ESB that will do some kind of rounting, so it might be necessary to explore the routing configuration of the ESB
4.) The ESB can use content-based routing, i.e. you would need to trace the messages
5.) The endpoint in the ESB can be virtual and only be resolved during runtime.

For answering your question, you will need much more background around the infrastructure in which the BPEL process is deployed. Depending on the infrastructure, it can also be impossible to answer your question with static analysis.

Regards,
Daniel

[Nariman Ammar]

Thanks Daniel and Antonio! In fact, the question about outsourcing is unrelated to my work on static analysis. It's more about knowing exactly where the data and business logic is going from a security perspective. The points below are very informative and I will look into them.