AxisService axisService) throws IOException, ServletException {
if (!canExposeServiceMetadata(axisService)){
res.sendError(HttpServletResponse.SC_FORBIDDEN);
return;
}
ExternalPolicySerializer serializer = new ExternalPolicySerializer();
serializer.setAssertionsToFilter(configContext
.getAxisConfiguration().getLocalPolicyAssertions());
// check whether Id is set
String idParam = req.getParameter("id");