Minutes of XACML TC 3 February 2005

[Anne Anderson <Anne.Anderson@Sun.COM>]

OASIS XACML TC Meeting
3 February 2005

Attendees:
  Anne Anderson (minute-taker)
  Seth Proctor
  Bill Parducci
  Daniel Engovatov
  Michael McIntosh
  Erik Rissanen
  Ron Williams
  Tim Moses
  Tony Nadalin
  Michiharu Kudo
  Rebekah Metz

Quorum was achieved.

1. Approve minutes from previous TC meeting 20 January 2005

http://www.oasis-open.org/archives/xacml/200501/msg00013.html

Move: Tim
Second: Anne

Approved unanimously

2. XACML 2.0 approved as OASIS Standard on 1 Feb 2005!!!!

Errata and typos.  Anne suggested one doc per specification.
Author/editor of each spec will generate an errata document.

Erik found errors in SAML schema.
Polar found at least two (one earlier, one more recently)


Action Item [Tim, Anne]: Change schemas to use "os", not "cd".
Use 1 Feb 2005 as date.  Send revised docs to Anne.  She will
send them to Mary McRae for approval, then ask OASIS webmaster to
place them into the "pre-reserved" web spaces, then enter the
locations into our web page.

3. Generalized XACML

http://www.oasis-open.org/archives/xacml/200501/msg00023.html

Action Item [Bill]: can Tim's concrete proposal be used to meet
his requirements?

Action Item [Polar,Daniel]: does Tim's concrete proposal meet
their requirements/objections.

Next Focus Group to discuss this proposal.

4. Delegation

Erik reports not much feedback so far.  He is not satisfied with
management of the huge database of policies (100's of 1000's) and
how they are linked to each other, and will be working on this.

5. Focus Group scheduled time

Frank could participate in Focus Group if we could change the
meeting time to the alternative we proposed.  Harder for Erik
(right around midnight), but he says OK.  Morning for Michiharu;
previously responded the morning time was actually a little
better for him.

Bill will announce on list and vote on list after looking up the
time we had proposed earlier.

Tokyo      CA     Boston/Ottawa     Sweden
8am        3pm    6pm               midnight [proposed FG time]
midnight   7am    10am              4pm      [current]

6. Non-XML representation of XACML

[Daniel's idea of a representation easier for purpose of reading
and writing XACML policies more easily.]  Not yet ready to
publish his draft, wants to make a few more improvements.  Will
post soon.

7. Quality of Service use cases

Bill's posting.  May intersect with part of Tim's proposal, which
he will study.  Addresses need for decisions that need more
information than "permit/deny", but do not really fit notion of
obligations.

Reference:
http://lists.oasis-open.org/archives/xacml/200502/msg00009.html

8. Rebekah Metz

Asked about Tim's earlier policy retrieval work.  Rebekah and her
colleagues are interested in this.

9. Erik Rissanen:

Use cases for asking which person can access which resource.
Anne suggested WSPL approach; also idea of identifying a subset
of XACML that can be readily transformed into Disjunctive Normal
Form (OR of AND's), since policies in that form can be analyzed
easily.

Next Focus Group agenda:
1. Generalized XACML
2. Non-XML representation

The meeting adjourned at 10:30am EST.

-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692