Minutes for 8 October 2009 TC Meeting

Note: esp on issues below, I tried to capture all the
details but may have missed a few, please request any
corrections that you might find or be concerned about
and I will fix - rich

Minutes for 8 October 2009 TC Meeting:
Time: 10:00 am EDT
Tel: 513-241-0892 Access Code: 65998

 NOTE: (see below) mtgs now weekly: 
	next mtg 10/15 same time/tel

10:00 - 10:05 Roll Call & Approve Minutes

Voting Members: 12 of 12 (100%) (used for quorum calculation)

Erik Rissanen
Paul Tyson
Gareth Richards
Vernon Murdoch
Bill Parducci
Rich Levinson
Hal Lockhart
Seth Proctor
John Tolbert
David Staggs
Duane DeCouteau
Anil Saldhana

    have quorum

Non voting members:

Prateek Mishra
Dilli Arumugam
Jan Herrmann

 (NOTE: voting status requires a member attendance 
  at 2 consecutive mtgs, 
  then member can vote at 3rd mtg; 
  if miss 2 consecutive mtgs
  then member loses voting status and 
  must regain thru above process)

24 September 2009 TC Meeting Minutes:
 http://lists.oasis-open.org/archives/xacml/200909/msg00089.html

  minutes approved

10:05 - 10:10 Administrivia

Phone number on TC web page updated:
 http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml

  point here was that main page had been updated. There is
   separate issue updating the oasis schedule page


XSPA: Call For Vote by company members to make Oasis Standard will
 be on Oct 16:
  http://lists.oasis-open.org/archives/xacml/200910/msg00006.html

  vote will start on oct 16


New: Oasis raised Issues on:   
 XACML Intellectual Property Control (IPC) profile
 emails exchanged w Hal, John - suggest 15 day extension
 discuss further at this tc mtg
  http://lists.oasis-open.org/archives/xacml/200909/msg00108.html

   Plan is to go forward w public review


New: Oasis raised Issues on:   
 XACML v3.0 Export Compliance- US (EC-US) profile Version 1.0
  http://lists.oasis-open.org/archives/xacml/200909/msg00107.html

   Plan is to go forward w public review


CFP: W3C Workshop on Access Control:
 http://lists.oasis-open.org/archives/xacml/200909/msg00086.html

  reference above if interested
   W3C Workshop on Access Control Application Scenarios
   Call for Participation 
   17 and 18 November 2009 -- Luxembourg


Proposal for Nov XACML Webinar from Dee Schur:
 http://lists.oasis-open.org/archives/xacml/200909/msg00098.html

  hal: will be focal point and coordinate w dee


Updated public review issues list:
 http://lists.oasis-open.org/archives/xacml/200909/msg00096.html


Proposals for weekly meetings to process issues:
 http://lists.oasis-open.org/archives/xacml/200909/msg00097.html

  hal: erik suggested weekly
  any objections?
   people agree its needed
   no objections
   will go to weekly notices


Issues:

New or updated since previous meeting:

New: Reference to the XML spec
 http://lists.oasis-open.org/archives/xacml/200910/msg00008.html

New: Argument order in new match functions
 http://lists.oasis-open.org/archives/xacml/200909/msg00106.html

#11 (updated) - strictness of xpath definition (has been extensive 
 disc. recent email refs below annotated w some summary of content
 to let people know what's being discussed at hi level)

  hal: issue of breaking out web services
  rich: not in favor
  jan: wants additional discussion
  hal: put item aside for now
  erik: there is also multiple resource profile tied in



Carried over from previous meeting:

#3 - dynamic RequestContextPath
 http://lists.oasis-open.org/archives/xacml/200909/msg00014.html

#4 - generalized higher order functions
 http://lists.oasis-open.org/archives/xacml/200909/msg00015.html

#5 - reverse order in <Match>
 http://lists.oasis-open.org/archives/xacml/200909/msg00017.html

#9 - xpath-node-match node type issue
 http://lists.oasis-open.org/archives/xacml/200909/msg00018.html

   Erik: sep 11 email has more detail on proposed chg
    does not see it should be restricted
   resolved by sep 11 email on issue 9


#10 - denied access to internal nodes in hierarchy
 http://lists.oasis-open.org/archives/xacml/200909/msg00019.html

#12 - normative statement which allows anything
 http://lists.oasis-open.org/archives/xacml/20009/msg00021.html

  rich: "alternative representation" defn needs to stay for now
  hal: set of inviolate rules for specific processing
   no change agreed yet


#15 - ancestor attributes of XML nodes
 http://lists.oasis-open.org/archives/xacml/200909/msg00022.html

#16 - offset for attribute selector
 http://lists.oasis-open.org/archives/xacml/200909/msg00023.html

#17 - internal optimization
 http://lists.oasis-open.org/archives/xacml/200909/msg00024.html

   MR lines 71-74
   leave text alone for now and close issue


#18 - redundant functionality in multiple profile
 http://lists.oasis-open.org/archives/xacml/200909/msg00025.html

#19 - types of descendants
 http://lists.oasis-open.org/archives/xacml/200909/msg00026.html

  comment 3 in jan's july xacml-comment email
  jan: can't do descendant w xpath

  defer for further discussion


#20 - multiple node identities
 http://lists.oasis-open.org/archives/xacml/200909/msg00027.html

  close w/o action


#22 - profile identifier
 http://lists.oasis-open.org/archives/xacml/200909/msg00028.html

  hal: impl announces capabilities thru these URIs
  jan: note w purpose of attr might be helpful
  hal: is it in conformance
  paul: also was concerned about the defns
  jan: maybe that id is saying using specific part of profile
  erik: add that uri is used as metadata
  hal: move section 5 earlier;
  paul: useful for readability to have them in one place and
   in the sections themselves


#23 - overloading of term "individual"
 http://lists.oasis-open.org/archives/xacml/200909/msg00029.html

  paul: issue is identifying individual requests
  jan: ind req used for 2 things: if mult req els, mult rsrcs
  rich: agrees 2 meanings for ind req, need more specificity
  hal: leave for now


#24 - usefulness of multiple <Attributes> elements
 http://lists.oasis-open.org/archives/xacml/200909/msg00030.html

  multiple individual requests in single global request
  hal: close w no change


#25 - meaning of "EntireHierarchy"
 http://lists.oasis-open.org/archives/xacml/200909/msg00031.html

#26 - indeterminate in EntireHierarchy
 http://lists.oasis-open.org/archives/xacml/200909/msg00032.html

  #10 from jan: 
  hal: like a policy combining rule. defining fixed behavior is
   reasonable
  entire hierarchy: combining algorithm


#27 - non-xml functionality in multiple profile
 http://lists.oasis-open.org/archives/xacml/200909/msg00033.html

#28 - PolicySet in RBAC profile
 http://lists.oasis-open.org/archives/xacml/200909/msg00034.html

#31 - acknowledgments
 http://lists.oasis-open.org/archives/xacml/200909/msg00035.html

Question re: urn:oasis:names:tc:xacml:1.0:resource:xpath
 http://lists.oasis-open.org/archives/xacml/200909/msg00012.html

Naming consistency
 http://lists.oasis-open.org/archives/xacml/200909/msg00051.html

Substring functions
 http://lists.oasis-open.org/archives/xacml/200909/msg00052.html

Delegation/administration profile
 http://lists.oasis-open.org/archives/xacml/200909/msg00063.html

RDF exploration
 http://lists.oasis-open.org/archives/xacml/200909/msg00000.html

AttributeAssignmentExpression
 http://lists.oasis-open.org/archives/xacml/200908/msg00013.html

Core Conformance
 http://lists.oasis-open.org/archives/xacml/200907/msg00022.html

XACML Future Work
 http://lists.oasis-open.org/archives/xacml/200907/msg00026.html
 http://lists.oasis-open.org/archives/xacml/200907/msg00027.html

relax-ng grammar for xacml
 http://lists.oasis-open.org/archives/xacml/200907/msg00002.html

x.500 (new concerns on same issue from prev mtgs)
 http://lists.oasis-open.org/archives/xacml/200907/msg00010.html


 -> action: hal suggests tc solicit proposals for addressing hier 
	and multiple profiles; action is to those who want to 
	submit proposals

    hal: f2f to address some of these issues
     rich: would be nice to have good dial in facility for 
	participants who can't arrange the travel.

   meeting adjourned: 11:05

   next meeting Thu 15-Oct-2009 - 10AM ET