Minutes for 31 October 2013 TC Meeting

[rich levinson <rich.levinson@oracle.com>]

	*******************************************
	NOTE: new time for
	 next XAMCL TC meeting (Nov 14, 2013) and onward:
	   14:30 EST
           11:30 PST
	    6:30 NZDT
	*******************************************

Time: 16:30 EDT (GMT-0400)
Tel: 513-241-0892
Access Code: 65998

Minutes for 31 October 2013 TC Meeting

I. Roll Call & Minutes

Voting Members
 Crystal Hayes
 Mohammad Jafari
 Steven Legg
 Rich Levinson
 Hal Lockhart	Chair
 Bill Parducci	Chair
 Remon Sinnema
 John Tolbert

Voting Members: 8 of 10 (80%) (used for quorum calculation) 

	bill: we have quorum

 Approve Minutes:
  17 October 2013 TC Meeting
  https://lists.oasis-open.org/archives/xacml/201310/msg00024.html

	hal: minutes approved unanimously; no objections heard


II. Administrivia

  Meeting Time Change 14 November 2013-> from above minutes:
   scheduled time for XACML TC meeting starting 14 November 20013 to be: 
	 14:30 EST
         11:30 PST
	  6:30 NZDT
   also: following 2 mtgs are cancelled for upcoming holidays:
	   Canceled: 28 November 2013 XACML TC mtg
	   Canceled: 26 December 2013 XACML TC mtg

  DLP-NAC profile uploaded: from minutes:
	   John: We have asked for more concrete Use Cases to be inserted
	   into the Profile to likewise give the TC tangible requirements
	   against.
   https://lists.oasis-open.org/archives/xacml/201310/msg00027.html

    john: nextlabs has some use cases he is trying to include

  XACML v3.0 Related and Nested Entities Profile Version 1.0 uploaded

    https://lists.oasis-open.org/archives/xacml/201310/msg00028.html
   comments:
     john:     https://lists.oasis-open.org/archives/xacml/201310/msg00029.html
     steven:   https://lists.oasis-open.org/archives/xacml/201310/msg00030.html
     mohammad: https://lists.oasis-open.org/archives/xacml/201310/msg00031.html
     steven:   https://lists.oasis-open.org/archives/xacml/201310/msg00035.html
               https://lists.oasis-open.org/archives/xacml/201310/msg00036.html
     john:     https://lists.oasis-open.org/archives/xacml/201310/msg00038.html

    steven: follow-up to attrs of rels thread:
	addresses "attribute flattening"
	moved more from programmatic to declarative representation
	normally interested in boolean result
	conditions: improve syntax
	also returning obls
	
	went thru doc section by section:

    2     Quantified Expressions	7
    2.1     ForAny _expression_	7
    2.2     ForAll _expression_	8
    2.3     Map _expression_	8
    2.4     Select _expression_	9

    3     The Entity Data-type	10
    3.1     Examples of Entity Values (non-normative)	10

    4     Functions	13
    4.1     The attribute-designator function	13
    4.1.1     Example (non-normative)	13
    4.2     The attribute-selector function	14
    4.3     The entity-one-and-only function	15
    4.4     The entity-bag-size function	15
    4.5     The entity-bag function	16

    5     Examples (non-normative)	17
    5.1     Matching Values in a Bag	17
    5.2     Access Subject Relationships	18
    5.3     Table-driven Policy _expression_	21
    5.3.1     Table-driven Policy _expression_ Using XACML Attributes 22
    5.3.2     Table-driven Policy _expression_ Using XML 25

	hal: comments?
	john: namespace collisions? canonicalization things?
	 is there issue, for example w attrs defined in ipc profile?
	hal: in mathematics: range is input allowed, domain is output allowed

	hal: members should review in detail and next mtg we should
	 have substantive discussion


  Request / Response Interface based on JSON and HTTP for XACML 3.0 Version 1.0
   15-day public review announced:
     https://lists.oasis-open.org/archives/xacml/201310/msg00032.html

	hal: may want to progress for CS at next call then
	 send as part of group


  XACML MAP Authorization Profile WD3 uploaded
    https://lists.oasis-open.org/archives/xacml/201310/msg00034.html

	hal: update to profile
	john: should be final iteration for wd; looking
	 to move toward csd and pub rev.

  additional item: possible interop (dept homeland security):
      	john: xacml interop: martin smith: washington dc;
	 looking to see if members willing to re-run rsa demo;
	hal: people could do over internet; vs rsa where people
	 are already there, so attractive for vendors
	john: govt looking to make this public event in govt-specific
	 manner, maybe 3-4 months after 1st of year
	hal: there were issues raised last summer outside tc and is
	 that something that needs to be addressed
	john: symantec may have some interest in participating
	hal: had offline disc w bill on 80/20 dialect of xacml, maybe
	  that might drive adoption more
	john: please notify if there is interest
	hal: john will post more details to list
	john: will post at time tbd; still discussing w other parties

III. Issues

  RuleID (question: additional comments since last mtg)
   hal: https://lists.oasis-open.org/archives/xacml/201310/msg00037.html

	hal: only used in combining algs for policies,
	  only have to be unique within policy
	rich: ruleid defn as string in xsd, vs other id's that are anyURI   

  IP Address comparisons: from minutes: ACTION ITEM:
    Hal will write up some example functions for comparison to begin discussion.
   https://lists.oasis-open.org/archives/xacml/201310/msg00011.html

	hal: will try for next mtg to post

IV. Other business:

	meeting adjourned 5:12 PM EDT
	
	note: new time for next meeting and onward: 14:30 EST

--
Thanks, Rich

Rich Levinson | Internet Standards Security Architect
Mobile: +1 978 5055017
Oracle Identity Management
45 Network Drive | Burlington, Massachusetts 01803
Oracle is committed to developing practices and products that help protect the environment