1. A method for performing access control decisions within a data processing system, the method comprising: specifying a protected object namespace based on a Web Service Description Language (WSDL) document such that a WS-Addressing-defined endpoint reference provides a reference into the protected object namespace; and performing an access control decision with respect to the protected object namespace with respect to authorization mechanisms applied to resources represented within the protected object namespace.