Conclusions from the May 22 XACML focus group concall...

Title: Conclusions from the May 22 XACML focus group concall...

Hi all,

On the XACML focus group concall yesterday, we discussed the 1.1 work items listed below.  Present on the call were Anne Anderson, Michiharu Kudo, and Carlisle Adams.

Omitting all the details of the discussion, the current status of the items is as follows:

A (Fully specify hierarchical resources):  This still needs some discussion/clarification.  One main issue is to define a mechanism to specify the type of hierarchical resource (e.g., an XML document, or a Unix File System), rather than assuming that the "resource content" attribute will always hold an XML document.  The other main issue is how to deal with action propagation and implication.

B (Add an ID Attribute):  This item can probably be dropped since signing the full policy doesn't seem to need it.

C (Deterministic algorithm for combining obligations):  Michiharu suggests that this item can be dropped for 1.1.

D (Obligations in Rule Element):  This proposal is fairly mature.  Approval is needed from the TC.

E (Condition References):  Michiharu suggests that this item can be dropped as long as item H is approved.

F (Properties for new Combining Algorithm):  This still needs discussion/debate.  Controversy remains over the usefulness and potential complexity of this proposal.

G (Environment in Target Element):  This proposal is mature and ready for a TC vote.

H (References to Rules):  This proposal is mature and ready for a TC vote.

We can discuss this list on the next TC concall (May 29).

Carlisle.

-----Original Message-----

From: Anne Anderson [mailto:]

Sent: Thursday, May 15, 2003 2:56 PM

To: XACML TC

Subject: [xacml] 1.1 Work Items: Index to Proposed Solutions

Here are the XACML 1.1 Work Items with links to the most recent

proposed solution(s).  If I have overlooked something, please

send a corrected index to the list!

A. Fully specify hierarchical resources

   a. Original proposal [Simon]

      http://lists.oasis-open.org/archives/xacml/200304/msg00057.html

   b. Second proposal [Anne]

      http://lists.oasis-open.org/archives/xacml/200305/msg00009.html

      Example:

      http://lists.oasis-open.org/archives/xacml/200305/msg00028.html

B. Add an ID Attribute

   http://lists.oasis-open.org/archives/xacml/200304/msg00071.html

   Simon has since declared that, since we are no longer talking

   about signing only portions of a policy, there is no need for

   ID attribute.

C. Deterministic algorithm for combining obligations

   No solution proposed yet.

D. Obligations in Rule Element

   http://lists.oasis-open.org/archives/xacml/200305/msg00011.html

E. Condition References

   http://lists.oasis-open.org/archives/xacml/200304/msg00039.html

F. Properties for new Combining Algorithm

   http://lists.oasis-open.org/archives/xacml/200305/msg00014.html

G. Environment in Target Element

   http://lists.oasis-open.org/archives/xacml/200305/msg00012.html

H. References to Rules

   http://lists.oasis-open.org/archives/xacml/200305/msg00004.html

Anne