xacml — archive

List of pending issues (backlog)?

From: Cyril Dangerville <[email protected]>
To: [email protected]
Date: Wed, 19 Jul 2023 23:54:00 -0000

Hello all, I have (re)joined the XACML TC recently, and as I have a few issues to add to the TC’s “backlog” for later discussion, I am looking for a place in the TC workspace where you keep track of pending issues. Is there such a place? I’ve seen the “Wishlist” page on the wiki but seems quite old. To give an idea, some issues of interest to me: 1) Changes to XACML core spec: a. Backward-compatible / non-breaking changes: i. Add <VariableRefence> as third choice in Target <Match> (in addition to AttributeDesignator, AttributeSelector) ii. Add <VariableDefinition>s as optional elements in <PolicySet> and <Rule> (like in <Policy>) iii. Support JsonPath evaluation in <AttributeDesignator>, by adding optional attribute ‘contentType’ (for example) = ‘JSON’ or ‘XML’ (‘XML’ is the default value), to indicate whether the <Content> must be processed as ‘JSON’ object instead of XML, and the ‘Path’ handled as JsonPath according to this draft RFC: https://datatracker.ietf.org/doc/draft-ietf-jsonpath-base/ . For this one, it may be safer to wait it become an IETF standard. But it’s good to anticipate. b. Breaking/non-backward-compatible changes to XACML core spec, therefore to be considered rather for XACML 4.0: i. XSD simplification: replace Obligation/Advice(_expression_) elements with one PepAction(_expression_) element and a XML attribute required=’true’ (for Obligation) or ‘false’ (for Advice) 2) New profiles: a. YAML Profile of XACML: for writing XACML policies in YAML. Kind regards, Cyril From: [email protected] < [email protected] > On Behalf Of William Parducci Sent: mercredi 19 juillet 2023 00:54 To: XACML TC < [email protected] > Subject: [xacml] Proposed Agenda 19 July, 2023 TC Meeting Time: 4:30 PM EDT (UTC-4) Tel: 1-267-807-9601 Access Code: 620-103-760 Proposed agenda 25 May 2023 TC meeting I. Roll Call & Minutes Approve Minutes 25 May 2023 TC Meeting https://lists.oasis-open.org/archives/xacml/202305/msg00005.html II. Administrivia Home Page clean-up https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml OASIS event announcements https://lists.oasis-open.org/archives/xacml/202307/msg00000.html III. Issues Separation of Duties b