xacml — archive

Minutes of XACML TC Meeting 19 Aug 2004

From: Anne Anderson <[email protected]>
To: [email protected]
Date: Thu, 19 Aug 2004 14:58:00 -0000

MHonArc v2.5.0b2 -->

xacml message

Subject: Minutes of XACML TC Meeting 19 Aug 2004

From: Anne Anderson <[email protected]>
To: XACML TC <[email protected]>
Date: Thu, 19 Aug 2004 10:57:50 -0400

Minutes of XACML TC Meeting
19 August 2004, 10am EDT

Voting members present:
  Anne Anderson (minutes)
  Frank Siebenlist
  Ron Jacobson
  Tim Moses
  Simon Godik
  Michiharu Kudo
  Steve Anderson
  Seth Proctor

Prospective member present:
  Ed Coyne

1. Roll call

      Quorum WAS achieved.  8 of 15 voting members were present.

2. Appointment of chair-pro-tem

      Tim Moses was approved unanimously.

3. Any agenda changes

      None were proposed.

4. Approval of revised 5 August 2004 Minutes

   http://lists.oasis-open.org/archives/xacml/200408/msg00018.html

      Anne moved to approve.  Simon seconded.  Minutes were
      approved unanimously.

5. Status of profiles (brief)

   Delegation - Simon has not had time to work on profile.

      Meeting recommends delaying until next version of XACML.

   SAML - revision addressing population of SAML envelope elements
   (primarily Status) almost ready.

      Reminder: Review Draft 03 (linked from TC home page)

   Hierarchical Resources - comments received from Tim Moses, not
      yet addressed.

   Multiple Resources - comments received from Tim Moses, not yet
      addressed.

   Privacy - No comments outstanding.

   Digital Signature - waiting for SAML Profile to be completed,
      since next draft will just point to SAML Profile and
      provide some guidance on canonicalization issues.

   RBAC - no progress on determining IPR status of models and
   mechanisms for addressing dynamic separation of duty.  There
   may actually be value in issuing the current specification,
   limited to basic RBAC and hierarchical RBAC, which it
   addresses satisfactorily.  Separation of duty will require a
   different model that is somewhat at odds with XACML's
   "role-as-attribute" model, so may make sense to issue separate
   profile for addressing that (although SOD mechanism could also
   deal with basic and hierarchical RBAC).

       Anne will consider further and make a recommendation.

6. Timetable and dates for XACML 2.0 CD vote

   See OASIS rules at
   http://www.oasis-open.org/committees/process.php#standards_approval

   Schedule:
   26 Aug  04: (FG) discuss any open issues.
               Final comments on profiles due.
   02 Sept 04: (TC) begin two week internal review.
               Final drafts must be available.
   16 Sept 04: (TC) CD vote
                 Approval requires 2/3 of total membership of TC.
               (TC) Vote to initiate public review.
                 Approval requires majority of quorum.
   16 Sept 04: Chairs submit to OASIS TC Administrator for
                 initiation of public review.
   17 Sept 04: 30 day public review begins.
   17 Oct  04: 30 day public review concludes.
   28 Oct  04: (TC) Vote to re-approve CD and submit to OASIS.
   15 Nov  04: Submit to OASIS with recommendation for
                 approval as OASIS Standard.  3 attestations of
                 "successfully using" must be submitted as part
                 of the package.
   01 Dec 04: OASIS TC Administration submits to OASIS
                 membership; 15-day review period begins.
   16 Dec 04: OASIS voting period begins.
   31 Dec 04: Conclusion of OASIS voting period.
   01 Jan 05: Approval as OASIS Standard.
 

   If 2/3 of membership not present 16 Sept 04:
   16 Sept 04: (TC) Begin 7 calendar day electronic vote
   23 Sept 04: Conclusion of TC vote, determination of result
      remainder of schedule unchanged, since submission to
      OASIS only allowed at beginning of a month.

7. W3C Constraints and Capabilities for Web Services Workshop

   Anne reported on this workshop, whose topic is what we have
      been calling "web services policy".
   Prospective participants must submit a "position paper" that
      addresses a specified use case (or else propose, justify,
      and address an alternative use case).
   Maximum of 2 attendees per organization.
   Dates:
    *  August 27: Deadline for position papers for the workshop program (1 to 5 pages - send to [email protected]).
    * 24 September: Workshop program available
    * 1 October: Registration closed
    * 12-13 October: Workshop on Constraints and Capabilities

   Workshop Web Page:  http://www.w3.org/2004/06/ws-cc-cfp.html

8. Adjournment

   Anne moved to adjourn.  Meeting was adjourned at 10:34am EDT.

-- 
Anne H. Anderson             Email: [email protected]
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692