strawman for charter clarification

[Anne Anderson <Anne.Anderson@Sun.COM>]

Attached is a strawman to start discussion of a possible charter
clarification for the Access Control (XACML) TC.

Our current charter is fairly broad, and could cover these items,
but clarifying the charter, and its subsequent publicity, may
encourage new voting members who are interested in specific
topics we plan to address to join the TC as active participants.

Anne
-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692

Title: Proposed post-2.0 XACML TC Charter

Proposed post-2.0 XACML TC Charter

Version: 1.4
Updated: 04/09/24 (yy/mm/dd)
Editor:  Anne Anderson

The charter for this TC is as follows.

Name
eXtensible Access Control Markup Language - XACML

Statement of Purpose

The XACML Technical Committee will complete specification of XACML 2.0 and its approved Committee Drafts and will further specify the use of XACML in particular domains.

Scope

1. The XACML Technical Committee will complete specification and standardization of XACML 2.0 and profiles that have already been approved as Committee Drafts.

2. The XACML Technical Committee will specify and define profiles or extensions to the XACML 2.0 schemas and specifications for the following domains:

   • Delegation of access control rights.
   • Delegation of authorization to manage XACML policies.
   • Role based access control for separation of duty and dynamic role assignment.
   • Bindings to LDAP and SQL as means of accessing and communicating policy and attribute information.
   • Incorporation of authorization policies into web service policies

3. New versions of the core XACML 2.0 specification and/or its approved Committee Drafts MAY be issued if necessary to support the above profiles and extensions, or to correct serious errors found in current versions.

4. The Committee MAY publish non-normative XACML implementer guides and XACML tutorials related to these or previous deliverables of the Committee.

Deliverables and Completion Dates

XACML 2.0 specification set:

• XACML 2.0 - January 2005
• SAML 2.0 profile of XACML - January 2005
• XML Digital Signature profile of XACML - January 2005
• Privacy policy profile of XACML - January 2005
• Hierarchical Resource profile of XACML - January 2005
• Multiple Resource profile of XACML - January 2005
• Core and Hierarchical Role Based Access Control (RBAC) profile of XACML - January 2005

Additional specifications and schemas:

• Delegation and Policy Management profile of XACML - December 2005
• Separation of Duty and Dynamic Role Assignment RBAC profile of XACML - December 2005
• LDAP profile of XACML - December 2005
• SQL profile of XACML - December 2005
• Web services profile of XACML - December 2005

Anticipated Audience or Users

The audience is anyone needing an XML representation of authorization decision requests, responses, policies; anyone needing to use, evaluate, or manage such policies.

Language for Conducting Business

The TC will conduct its business in English.