xacml — archive

[Rich Levinson]

Time: 10:00 am ET Tel: 513-241-0892 Access Code: 65998 Minutes for 19 November 2009 TC Meeting: 10:00 - 10:05 Roll Call (partial may have missed couple) duane jan seth erik paul dilli rich bill ibm covering for vernon have quorum Approve Minutes of 12 November 2009 TC Meeting http://lists.oasis-open.org/archives/xacml/200911/msg00013.html approved no objection 10:05 - 10:10 Administrivia Interoperability Demonstration Opportunity for OASIS Security-related TCs at RSA 2010 (see email copied after end of agenda below:) RSA 2010, see end of agenda for details F2F Logistics: layout agenda Redwood City, Oracle Tue Dec 8 (8AM-5PM) Wed Dec 9 (8AM-5PM) Thu Dec 10 (8AM-5PM) http://lists.oasis-open.org/archives/xacml/200911/msg00024.html wk after tg will have room #s, etc. suggestions on logistics F2F ref again: hotels etc: http://lists.oasis-open.org/archives/xacml/200911/msg00009.html F2F Observers invitation discussion: http://lists.oasis-open.org/archives/xacml/200911/msg00016.html need to follow any oasis policies, etc. Core spec updated and brief description of status from Erik: http://lists.oasis-open.org/archives/xacml/200911/msg00020.html http://lists.oasis-open.org/archives/xacml/200911/msg00021.html Erik: has put all issues in from core General F2F: Bill: will set up wiki page to consolidate issues, topic for mtg Erik: make chgs in evening to keep up w day; goal is cd2 Bill: even if not quorum, put items in vote at thu call for full consideration; Paul: teleconf for mtg sessions: Rich: we will try to utilize oracle web conf capability Erik: would like proposals on all issues for f2f Bill: one more voice call dec 3: we should settle agenda at that time; 80-90% assurance on agenda topics 10:10 - 11:00 Issues Issue list reference (updated from agenda, to the following msg, doc): http://lists.oasis-open.org/archives/xacml/200911/msg00021.html http://lists.oasis-open.org/archives/xacml/200911/xls00003.xls Proposal from Erik to restrict policies to element, attr, text nodes: http://lists.oasis-open.org/archives/xacml/200911/msg00017.html Jan: processing instructions, comments not included Erik: it is attr selector, not xpath matching Paul: seem unnecessary to exclude Erik: may refer to resource content; xml resource one would access based on xml comments possibly; part of resource, not part of policy; processing instructions may use these for appl-specific info issue will be closed (not in spec update, so no action) Possible issue w Inconsistency of Obligation Enforcement: Erik, Bill: http://lists.oasis-open.org/archives/xacml/200911/msg00019.html Bill agrees w proposal; wording refers to pep constrained to follow bias of pdp on rcving obl it does not understand. change approved Proposed schema change for policies and discussion from David Chadwick and response from Erik: http://lists.oasis-open.org/archives/xacml/200911/msg00023.html Erik: David proposed req ctx schema for ext pts xml any, where can put proprietary policy lang things; doesn't make sense to std on any policies in fmt; suggest using saml/xacml mechanism Rich: sees it as potentially disruptive, effectively allowing elements as children of PolicySet Bill: proprietary elements don't make sense; need further info to be considered; defer topic until more info from David addressing concerns in email and minutes Proposal for issue 19 from Jan: http://lists.oasis-open.org/archives/xacml/200911/msg00025.html Erik: should be individual resource-id as std case; Paul: this should be a new issue, will send email defer until after refactoring Proposal for issue 4 from Jan: http://lists.oasis-open.org/archives/xacml/200911/msg00026.html Jan: issue is ordering of parameters make things too restrictive, esp when using xacml extensibility Jan: any function; assign to each element in bag Erik: need another week to process info Bill: possibly an F2F topic *** End of Agenda *** Begin forwarded message on Interoperability Demonstration Opportunity: > From: "Jane Harnad"