Minutes 4 December 2008 TC Meeting

[Bill Parducci <bill@parducci.net>]

1. Roll Call
    Hal Lockhart (Chair)
    Bill Parducci (Co-chair, minutes)
    Erik Rissanen
    Anthony Nadalin
    Anil Saldhana
    Darran Rolls
    Seth Proctor
    John Tolbert
    Duane DeCouteau
    David Staggs

   Non-voting
    John Tolbert
    Anil Tappetla

   Guest
    Mike Beach, Boeing

    Quorum met (88% per Kavi)

    Minutes from 20 November 2008 Meeting
    Approved unanimously.

2. Administrivia
   XACML EBNF (XACML-based research work)
    Hal noted a post on research work surround XACML. The author is
    looking for research internship opportunities involving XACML.
    http://lists.oasis-open.org/archives/xacml/200812/msg00002.html

    Seth offered that the submitter seemed enthusiastic and would be
    a great intern for anyone looking. He has is availble to discuss
    details of his thoughts on the performance analysis based upon
    his experience at the SWS workshop with the topic/submittters.

   XACML-PAM
    Hal also noted a post on XACML being used for PAM auth.
    http://lists.oasis-open.org/archives/xacml/200812/msg00004.html

3. Issues
   Mike Beach from Boeing reviewed his authz Use Cases
    http://projectconcordia.org/images/d/d6/BoeingFineGrainedAuthorization.pdf
    (starting at slide 8)
    The basis of the talk is the ability of XACML to deal with export
    licensing using Obligations or is additional machinery needed?

    Seth noted that he has come across a number of other implementers
    with similar requirements. Obligations do not seem to be the proper
    solution to provide ancillary decision information.

    There was discussion on the reasoning behind not having Obligations
    at the Rule level (and below).

    There is general agreement to accept Erik's proposal on dynamic
    parameters in Obligations.
    http://lists.oasis-open.org/archives/xacml/200811/msg00049.html

   Issue 23 - Access Permitted
    This Issues has been CLOSED by the TC

   Issue 86 - SAML Profile
    There is general agreement to have the Editor update the current
    draft to use the wording proposed by Hal for Issue 86.

   string-union
    There is general agreement by the TC to accept the suggestion on
    the Comment list to modify string-union functionality to allow  
more that
    2 values.

   XPSA Profile - Move to Public Review (VOTE)
    David Staggs moved that the XPSA Profile be moved from Committee
    Draft to Public Review. This was seconded by Anil Saldhana. This was
    APPROVED by unanimous consent by vote of attending members..


  meeting adjourned.