Minutes for 21 July 2016 TC Meeting

[rich levinson <rich.levinson@oracle.com>]

Time: 4:30 PM EDT (-0400 GMT)
Tel: 1-712-775-7031
Access Code: 620-103-760

Minutes for 21 July 2016 TC Meeting

I. Roll Call & Minutes Roll Call

voting:
Mohammad Jafari	Voting Member
Steven Legg	Voting Member
Rich Levinson	Secretary
Bill Parducci	Chair
Martin Smith	Voting Member

non-voting:
Remon Sinnema	Member

Voting Members: 5 of 6 (83%) (used for quorum calculation)

  bill: we have quorum


  bill: additions to agenda?

  martin: would like input on idef


  Approve Minutes 7 July 2016
   https://lists.oasis-open.org/archives/xacml/201607/msg00012.html

	bill: no objections heard: minutes approved

   
II. Administrivia

    bill: added calendar entries from now thru Nov

   Standardization Status of Documents
    https://lists.oasis-open.org/archives/xacml/201607/msg00018.html

     martin: 2 nomination quorums: list of profiles are reasonable set,
	waiting for "ok" whether anything xspa; waiting for ack that
	also hierarchical, and multi-decision

        rich: reviewed hier/multi desc in doc martin sent: looks ok

	list in draft: saml, rest, json, rbac, hier, multi, dsig, ipc, ec-us
	 draft attached to above email

	1. SAML Profile Version 2.0 Committee Spec 02, 19 August 2014
	2. REST Profile of XACML v3.0 V-1.0 Committee Spec 02, 23 Nov 2014
	3. JSON Profile of XACML 3.0 V-1.0 Committee Spec 01, 11 Dec 2014
	4. Core and Hierarchical Role Based Access Control (RBAC)
	    Profile V-1.0 Committee Specification 02, 23 Oct 2014
	5. Hierarchical Resource Profile V-1.0, Committee Spec 02, 18 May 2014
	6. Multiple Decision Profile V-1.0, Committee Spec 02, 18 May 2014
	7. XML Digital Signature Profile V-1.0, Committee Spec 02, 18 May 2014
	8. Intellectual Property Control (IPC) Profile V-1.0 OASIS Standard, 19 January 2015
	9. Export Compliance-US (EC-US) Profile V-1.0 OASIS Standard, 19 Jan 2015


	martin: idef group meets on tue before xacml tc, so a cycle adds 4 weeks
	 to the process, so recommends expediting


   2 new impls added to tc home page:
    https://lists.oasis-open.org/archives/xacml/201607/msg00017.html

	rich: 2 new interesting additions to the list of impls;
	  https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml#other
	 1. "AuthzForce" is complete pdp:
	       w java api:
	        https://authzforce.ow2.org/
	       and rest api:
	        http://catalogue.fiware.org/enablers/authorization-pdp-authzforce
	 2. "FACPL" (Formal Access Control Policy Language) is policy analyis tool,
	      user guide:
	       http://facpl.sourceforge.net/guide/facpl_guide.html
	
	      w xacml/facpl comparison in sec 9.1 of following doc:
	       http://local.disia.unifi.it/wp_disia/2016/wp_disia_2016_05.pdf

   Errata: Steven comments:

     item 4 - status codes
       https://lists.oasis-open.org/archives/xacml/201607/msg00013.html
	steven, rich: more clarity on wording needed:
	 bill: move forward and clarify the prose
	 bill: will talk to richard

     item 3 - xpath expressions
       https://lists.oasis-open.org/archives/xacml/201607/msg00014.html
	steven: namespace declarations: attr namespace issue
	  recommends clarifying attr w namespace as officially consistent w xml specs

     attr selector:
       https://lists.oasis-open.org/archives/xacml/201607/msg00015.html
	steven: indeterminate error: when cat doesn't have content element child
	 not ref'd would cause you to fall back on must be present: should be
	 consensus based on email threads

     start tag sec 5.44:
       https://lists.oasis-open.org/archives/xacml/201607/msg00016.html
	steven: email explains

III. Issues

	none

  Meeting adjourned:

	next mtg: Aug 4