Understanding the security zones file

Besides importing the default security zone at initial server startup, PolicyCenter also loads any additional security zone data defined in file security-zones.xml. The use of this file is optional. You cannot use this mechanism to load security zone data after the initial server startup populates the database with data.

You access file security-config.xml in Guidewire Studio™ by navigating in the Project window to configuration > config > Security.

In the base configuration, file security-zones.xml provides only the top-level <import> XML element. To be useful, you must add one or more <SecurityZone> subelements. There is no limit to the number of <SecurityZone> elements that can exist in security-zone.xml.

The <SecurityZone> element has the following syntax.

<SecurityZone public-id="… ">
  <Description>Some meaningful description…</Description>
  <Name>Some meaningful name…</Name>
</SecurityZone>

The attributes and subelements of <SecurityZone> have the following meanings.

Element	Attribute	Required	Description
`SecurityZone`	`public-id`	Yes	Internal identifier for the security zone. Guidewire recommends that you make the value of this attribute meaningful for your organization. See Public ID prefix for more information on public IDs.
Name		Yes	External-facing name for the security zone. This name is visible in the PolicyCenter user interface.
`Description`		No	Description of the security zone, which, if provided, is externally facing in the PolicyCenter user interface.