Re: [xacml] Minutes for 26 May TC Meeting

On Thu, May 26, 2011 at 5:14 PM, Bill Parducci <bill@parducci.net> wrote:

I. Roll Call
�Voting Members
�Hal Lockhart (Chair)
�Bill Parducci (Co-Chair, minutes)
�Paul Tyson
�Doron Grinstein
�Remon Sinnema
�Anthony Nadalin
�Rich Levinson
�Hal Lockhart
�John Tolbert

�Member
| �David Broussard

Should read: David Brossard

�Quorum NOT met: (47% per Kavi)

I. Roll Call & Approve Minutes:
�Minutes
�NO vote on minutes for 19 May 2011 TC Meeting

II. Administrivia
�Hal noted that he will request at that next call we move back to
�biweekly calls.

�XACML 3.0 core wd 20 uploaded
�The TC is encouraged to review.

�F2F
�Hal will create a poll to gather the final attendance count for the
�F2F.

III. Issues Discussed
�PDP REST Interface (PAP)
�Hal noted that the current thinking on the list attribute
�information would be in JSON and transported using a POST over HTTP
�with the response. He offered that he personally would like to see
�this done in such a way that doesn't cap the functionality.

�David Chadwick concurs with this and noted that his current
�prototype doesn't cover Multiple Resources, but that this isn't part
�of the Core spec.

should read David Brossard concurs...

�Paul pointed out that the W3C is working to develop standardized
�mechanisms for expressing RDF graphs and that XACML fits within the
�scope of this work. Therefore the TC should consider building upon
�that work. Alternatively, he offered that a "bridge" between XACML
�and the W3C work may be developed.

�Hal countered that direct association with the concept of "Semantic
�Web" work may defeat the underlying driver for this project
�(enhanced approachability of XACML).

�Paul noted that he is not against any efforts to make XACML more
�approachable in HTTP based environments.

�XACML Implementers Guide
�Rich reviewed his position on the ramifications of how the current
�direction on extended Indeterminate response and what it may mean to
�new adopters. This lead to the revival of the Adopters Guide. Rich
�asked that the TC consider adding/updating content to the guide as
�for changes to the spec/Profiles that have been added since the
�guide

IV. New Issue
�Permit|Deny Bias PDPs & Extended Indeterminate
�Rich introduced and issue that was derived from comments by
�Indeterminate (D|P) results need to be percolated up to the response
�when generated by PDP bias.

�Paul asked for clarification where Ind(D|P) would be applicable in a
�real world example. He noted that and Ind(D) could not be converted
�into a Permit. Rich offered that additional Attributes could result
�in a N/A. Paul replied that this still doesn't result in a practical
�Use Case. Rich suggested that the TC dig into Chapter 2 of the
�Implementor's Guide to begin the clarification process.

�Obligations/Advice combining ambiguities.
�Rich asked for input on the current understanding on how Obligations
�/Advices are combined in a deterministic manner. Hal reviewed the
�historical context of the desire for unordered evaluation. Rich
�will post a proposed solution to the list that is based upon the
�concept of a "default" behavior, that is followed by a list of an
�enumerated list of Obligations/Advices that are attempted.

V. Carryover Issues
�Indeterminate Policy Target handling
�http://lists.oasis-open.org/archives/xacml/201105/msg00090.html

�PDP REST Interface - proposal
�http://lists.oasis-open.org/archives/xacml/201105/msg00056.html
�http://lists.oasis-open.org/archives/xacml/201105/msg00086.html
�("Towards the creation of XACML PEPs")

�Attribute predicate profile for SAML and XACML
�http://lists.oasis-open.org/archives/xacml/201105/msg00088.html

�XACML Metadata
�http://lists.oasis-open.org/archives/xacml/201105/msg00004.html

�Attribute predicate Profile for SAML and XACML
�http://lists.oasis-open.org/archives/xacml/201104/msg00080.html

�Break The Glass Profile
�http://lists.oasis-open.org/archives/xacml/201104/msg00082.html

�Profile Examples (Hierarchy)
�http://lists.oasis-open.org/archives/xacml/200910/msg00024.html

�PIP directive (additional information directives)
�http://lists.oasis-open.org/archives/xacml/201010/msg00005.html

�Usage of status:missing-attribute in case of an AttributeSelector
� http://lists.oasis-open.org/archives/xacml/201104/msg00003.html

�"Web Friendly" Policy Ids
� http://lists.oasis-open.org/archives/xacml/201103/msg00046.html

�Specifying a specific associated Resource in a Policy (Sticky Policies)
�http://lists.oasis-open.org/archives/xacml/201103/msg00012.html

meeting adjourned.

Next meeting June 2, 2010.

---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail. �Follow this link to all your TCs in OASIS at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php

xacml message