Design of policy-based security mechanisms in a distributed Web Services