Re: [cmis] Retention Policies & Legal Holds

[Mark Carlson <mark.carlson@oracle.com>]

Martin,

There is a lot of previous work that has been done in this space by
the storage industry. There are implications on delete operations
obviously where an error needs to be returned if the object is within
it's retention period or has a (usually named) legal hold on it.

You might want to read up on the XAM Standard (INCITS 464-2010)
or the relevant section of the CDMI cloud storage standard:

http://cdmi.sniacloud.com/cdmi_spec/18-retention_and_hold_management/18-retention_and_hold_management.htm#TOC_18_1_Retention

If CMIS does take this on, it would be good to leverage these other
standards such that if a repository is using a compliant storage device
or storage cloud, the semantics map and the repository can delegate
the actual retention implementation. In CDMI for example, this is done
with Data System Metadata as follows:

cdmi_retention_id
JSON String
Contains a user-specified retention identifier. This metadata is a user-specified text field that is used to tag a given object as being managed by a specific retention policy. It is not required to place an object under retention but is useful when needing to be able to perform a query to find all objects under a specific retention policy.

cdmi_retention_period
JSON String
Contains an [ISO-8601] time interval specifying the period the object is to be protected by retention. This metadata is the time interval (in either an [ISO-8601] date-duration or an [ISO-8601] date-date) during which the object is under retention. Only the duration or end-date may be altered when updated. If an object is under retention, the object may not be deleted and its value may not be altered. After the retention duration has elapsed, the object may be deleted.

cdmi_retention_autodelete
JSON String
This metadata is used to indicate if the object is to be automatically deleted when retention expires. The value of this metadata item shall be "true" when set.

cdmi_hold_id
JSON Array of JSON Strings
This metadata is used to indicate if the object is to be placed under a retention hold. If the array is not empty, the object is under a hold, with each string in the array containing a user-specified hold identifier. If an object is under one or more holds, the object is completely immutable.

-- mark

On 2/7/11 12:22 AM, Hermes, Martin wrote:

AD0CE40F2DADCE45ACBDDD62E28D8D84306FEFD33F@DEWDFECCR05.wdf.sap.corp" type="cite">

Dear all,

Last year we proposed a standardization of a Retention Policy and a Legal Hold Policy within CMIS to be able to manage the lifecycle of content in a repository from an business application. I would like to know if there is an interest to add such a feature to CMIS? The solution described here http://www.oasis-open.org/apps/org/workgroup/cmis/download.php/38779/Retention_Proposal_0.1.docx  does not require any changes to the CMIS protocol, but just defines policies for the two use cases. Please let me know what you think.

 

Thanks & Best regards,

Martin

 

 

Martin Hermes

SAP AG I SAP AG, Dietmar-Hopp-Allee 16, 69190 Walldorf, Germany

www.sap.com

 

Pfl ichtangaben/Mandatory Disclosure Statements:

http://www.sap.com/company/legal/impressum.epx

 

Diese E-Mail kann Betriebs- oder Geschäftsgeheimnisse oder sonstige vertrauliche Informationen enthalten.

Sollten Sie diese E-Mail irrtümlich erhalten haben, ist Ihnen eine Kenntnisnahme des Inhalts, eine Vervielfältigung

oder Weitergabe der E-Mail ausdrücklich untersagt. Bitte benachrichtigen Sie uns und vernichten Sie die

empfangene E-Mail. Vielen Dank.

This e-mail may contain trade secrets or privileged, undisclosed, or otherwise confi dential information. If you have

received this e-mail in error, you are hereby notifi ed that any review, copying, or distribution of it is strictly prohibited.

Please inform us immediately and destroy the original transmittal. Thank you for your cooperation.