[xacml] Minutes of May 16 Concall

Title: Minutes of May 16 Concall

XACML Conference Call

Date:  Thursday, May 16, 2002 

Time: 10:00 AM EDT 

Tel: 512-225-3050 Access Code: 65998 

Minutes of Meeting

Summary

Agreed to join Joint TC and to accept context idea in design. Lengthy review of action items. Schema sub committee is on track. No progress on security & privacy or conformance documents. Need to update Issues List.  Discussion of locations for F2F.

 

Action Items

1. [Ernesto, Anne] provide non-normative examples of policy signatures that cover just references to rules (ruleIDs) versus policy signatures that cover the actual content of rules.

2. [Carlisle] XACML will request from IBM a statement similar to IBM's statement covering ebXML regarding free use of IP for XACML.  Contact  to find out details regarding what ebXML did and whom at IBM they contacted. Karl Best to pursue.

3. [Ernesto] Check on W3C work regarding capability for signing at the element level.

Promised to post to list.

4. [Simon] write an example of the rules with the proposed structure. Promised to post to list.

5. [Anne] Explore extending ContextPrincipal to cover J2SE semantics.

6. [Carlisle] Talk to SAML about extending their schema to put complex obligation structure into SAML condition.  In general, talk to SAML about handling obligations.

7. Hal to take over section 6 of spec and produce something in next 2 weeks.

8. XACML primer by Hal/Konstantin to calendar with date 6/13

 

9. Michiharu and Anne to update descriptions of example applications, specifically for XML documents and J2SE after next schema released.

10. Michiharu to post description of IBM patent on mailing list when additional information becomes available.

11. Decide on date and location of next F2F.

12. Ken to look at issues list for ones that are ready to close.

Votes

Voted to accept minutes of April 22 (F2F) meeting

Voted to accept minutes of May 2 meeting

Voted to join Joint Technical Committee for Security

Voted to accept design around concept of input and output contexts

 

Proposed Agenda:

10:00-10:05 Roll Call and Agenda Review 

10:05-10:10 Vote to accept minutes of April 22 (F2F) meeting 

http://lists.oasis-open.org/archives/xacml/200205/msg00028.html 

10:10-10:15 Vote to accept minutes of May 2 meeting 

http://lists.oasis-open.org/archives/xacml/200205/msg00027.html 

10:15-10:25 Review of Action Items (see 4/22 and 5/02 minutes) 

10:25-10:40 Report of Schema Sub-Committee 

                  James/Polar (sec & priv considerations) 

                  Ken/Polar (conformance) 

10:40-10:50 Discussion of Overall Status 

(in particular, are items on the issues list getting closed?  are we progressing toward June 1st?) 

10:50-11:00 Discussion of next face-to-face meeting:  date, place (SACMAT?  Ottawa?) 

Roll Call 

Simon Godik, Self

Hal Lockhart, Entegrity

Carlisle Adams, Entrust

Don Flinn, Hitachi

Konstantin Beznosov, Hitachi

Michiharu Kudoh, IBM

Bill Parducci, Self

Polar Humenn, Self

Pierangela Samarati, University of Milan

Ernesto Damiani, University of Milan

Sekhar Vajjhala, Sun Microsystems

----

[Because we initially lacked quorum, but achieved it later, some items occured out of logical order.]

voted to accept minutes of 4/22 and 5/2.

Review of action items from 4/22.

1. [Ernesto, Anne] provide non-normative examples of policy signatures that cover just references to rules (ruleIDs) versus policy signatures that cover the actual content of rules. OPEN

2. [Carlisle] XACML will request from IBM a statement similar to IBM's statement covering ebXML regarding free use of IP for XACML.  Contact  to find out details regarding what ebXML did and whom at IBM they contacted. OPEN Karl Best to pursue.

3. [Carlisle, Michiharu] create write-up on XACML intermediate layer between XACML and SAML (or other contexts).  E.g. XACML 'context' and binding of SAML 1.0 to such. CLOSED (by Simon)

4.[Ernesto] Check on W3C work regarding capability for signing at the element level.

Promised to post to list after meeting.

5. [Simon] write an example of the rules with the proposed structure. Promised to post to list after meeting.

6. [Michiharu] write up the context. CLOSED (by Simon)

7. [Anne] Explore extending ContextPrincipal to cover J2SE semantics. OPEN

8. [Carlisle?] Talk to SAML about extending their schema to put complex obligation structure into SAML condition.  In general, talk to SAML about handling obligations.

OPEN

9. [?] Circulate first iteration of XACML response schema to list. CLOSED (by Simon)

Action items from 5/2

1. (from 4/18 action items) Hal to take over section 6 of spec and produce something in next 2 weeks. OPEN

2. (from 4/18 action items) Move action item for XACML primer by Hal/Konstantin to calendar with date of 1 month from today (5/16) Some progress made by Konstantin - new date 6/13

 

3.Michiharu and Anne to update descriptions of example applications, specifically for XML documents and J2SE after next schema released. OPEN

4.Simon to post minutes of a discussion held at F2F on context issue CLOSED

5. Vote on whether XACML should have its own context schema at the next conference call. CLOSED

6. Michiharu to post description of IBM patent on mailing list. OPEN

7. Vote to officially sanction the Joint Security Committee. CLOSED

8. Decide on date (early to mid June) and location of next F2F by 5/10. OPEN

Vote taken to join Joint Security TC - was mentioned that WSRP has a security sub committee

Vote taken to accept context design proposal

Simon reported on progress in Schema sub committee. Generally on track. minutes published. most recent discussion was over the policy name and policy identifier. expect to wrap up by 5/27

Polar reported on Security and Privacy considerations and on Conformance - no progress

expsct to get going again in a couple of weeks

Discussion of how people who do not attend the schema sub committee can track the work. Need to puiblish minutes each week. Will start to publish specs with change bars.

Need to look at issues list and see if items can be closed - Action for Ken (not present)

Discussion of location and dates for F2F - at SACMAT conference

in Ottawa, Boston, LA

at Burton Catalyst conference

Polar has conflict with OMG meeting

nothing concluded, Carlisle to post alternatives for vote