You are analyzing the different methods available to manage the life cycle of the OWSM...

Although you can boss attach and detachsecurity policies in JDeveloper, you can detach them only in Enterprise Manager.

An application developer typically uses JDeveloper to create new security policies rather than select them from a prebuilt list.

When you use JDeveloper to associate a security policy with a web service, the policy is not really attached until application development.

OWSM policies can be attached and detached with WLST.