Minutes from 3 August 2006 TC Meeting

Minutes of the OASIS XACML Technical Committee Meeting
03 August 2006

Voting Member Attendees:
  Erik Rissanen
  Anne Anderson
  Argyn Kuketayev
  Michiharu Kudo
  Tony Nadalin
  Seth Proctor
  Kamelendu Biswas
  David Staggs
  Daniel Engovatov
  Bill Parducci

Observer
  Rich Levinson (Oracle)

1. Roll Call and Agenda Review

Quorum was achieved

2. Vote on approval of minutes from 20 July 2006 meeting

http://lists.oasis-open.org/archives/xacml/200607/msg00009.html

Approved unanimously.

3. Legal Issue

Tony reported that IBM about to ship an XACML implementation.

OASIS does not take Errata documents as "Standards", and since

the OASIS copyright statements in schemas will only be in

Errata, IBM lawyers have a problem.  IBM has reported this to

OASIS Admin, and Bill Parducci will also query OASIS Admin.

4. Issues list

http://wiki.oasis-open.org/xacml/IssuesList

Open unless shown otherwise

40. Change ResourceContent (Daniel)

http://lists.oasis-open.org/archives/xacml/200607/msg00005.html
STATUS: Daniel will post schemas and short explanation

today.

3.  Should elements in a policy target and the request context be

open?
STATUS: Daniel will post schemas and short explanation

today.

5. Policy statements in request context

http://lists.oasis-open.org/archives/xacml/200606/msg00022.html

http://lists.oasis-open.org/archives/xacml/200606/msg00023.html

Note:in XACMLAuthzDecisionQuery in SAML Profile Version 2 draft

AI: Anne to draft proposal for describing semantics of such

policies in the core.

12. More general conclusions

Bill and Michiharu are champions.  Michiharu does

not have time to work on this now.  Erik has a student

who has been working on combining obligations for five

months and has one more month.  When he finishes his

thesis, Erik can let everyone see it.  The student has

looked at the proposal presented by Bill and Michiharu at

the last F2F.  Erik will ask the student to ping Bill.
STATUS: Continued open

13. "What are my permissions?"

Erik reports another student is working on this and it

will be made public when the student is finished.  Anne

and Seth also working on this.
STATUS: Continued open

22. Right to revoke
STATUS: Erik is writing a paper on this that will be

published as a research paper when he is done.  He says

it is a bit "far out", so may be too fancy for XACML at

this stage.
STATUS: Continued open

23. Access Permitted (Hal)

STATUS: Pending review.  It is in the current Admin draft.

25. Nested policy sets and enforcement of delegation

constraints
STATUS: Open.  Pending clarification by Erik.

27. The issuer of the PDP policy set

Erik says it is up to the entity that uses a result to

verify the identity of the issuer of that result; that

issuer is not used in the reduction algorithm.
STATUS: Pending review.

31. Passing arbitrary sets of Attributes in the request (Frank)

AI: Erik will draft syntax and text for SAML Profile, and

semantic description for core.  Erik has written a proposal.
STATUS: Pending review, depends on new issues #42-46.

36. PDP metadata

Bill and Polar discussed this way back.  Bill doesn't

have a specific proposal.  Supported version of XACML,

PDP top-level combining algorithm, attribute timing.
STATUS: Open.  CHAMPION: Bill

37. SAML Profile: XACMLPolicyQuery Target element (Anne)

http://lists.oasis-open.org/archives/xacml/200606/msg00033.html

http://lists.oasis-open.org/archives/xacml/200606/msg00034.html

No one can remember any use case for this.  Anne

recommended removing this element in SAML Profile version

2.
STATUS: Closed.  Resolution: remove this element from the

XACMLPolicyQuery.

38. Replace uri-string-concatenate with to-string and from-string

functions (Anne)

Should we deprecate the function uri-string-concatenate

in favor of a more general set of functions:

string-from-