Minutes: 6-Dec-07 XACML TC meeting

[Rich Levinson <rich.levinson@oracle.com>]

Note "->" points at action items along the way:

1 Roll Call:

 Voting Members
    Erik Rissanen      Axiomatics AB
    Hal Lockhart     BEA Systems, Inc.
    Ron Williams     IBM     Group Member
    Rich Levinson     Oracle Corporation
    Prateek Mishra     Oracle Corporation
    Anil Saldhana     Red Hat
    Anil Tappetla     Securent Inc.
    Seth Proctor     Sun Microsystems
    David Staggs     Veterans Health Administration
 Observer
    John Moehrke     GE Healthcare

2 Administrivia:

  Minutes from 8-Nov-07 meeting were approved.
     http://lists.oasis-open.org/archives/xacml/200711/msg00016.html
   Note: the minutes from the 25-Oct-07 mtg still have not been approved,
    because of tech logistics at 8-Nov mtg (see above link for details)
     http://lists.oasis-open.org/archives/xacml/200710/msg00040.html

  XACML Website
      Rich has taken on the editorial responsibilities for the TC website
     Web site has been updated w refs to latest docs for review
        
http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml#CURRENT

  RSA 2008 InterOp - Meetings
      http://lists.oasis-open.org/archives/xacml/200711/msg00035.html
     The meetings will be held weekly  Thu 11AM ET from 12/6/07 -> April 
Interop
      The link above has the dial in info

  IDTtrust 2008 - Status
      http://lists.oasis-open.org/archives/xacml/200711/msg00020.html
    Above link has background info on XACML panel being formed.
    Anil S. has sent out email w doc attached that has 3 proposed topics
     of discussion:
        http://lists.oasis-open.org/archives/xacml/200712/msg00006.html
    Hal also volunteered to join panel

  XACML Webinar
      http://lists.oasis-open.org/archives/xacml/200711/msg00021.html
     Dee suggested in above email that XACML TC consider doing an Oasis 
Webinar
      in preparation for the RSA Interop and possibly other topics - 
will reconsider in Jan
      when more clarity on current 3.0 and Interop activities should exist

  Oasis symposium -
      Hal mentioned: next april - bay area - call for papers is out -
      people encouraged to submit papers.

  Doc Updates
      Hierarchical, Multiple, Privacy and DSIG Profiles
        doc:   
http://lists.oasis-open.org/archives/xacml/200711/msg00026.html
        desc:  
http://lists.oasis-open.org/archives/xacml/200711/msg00027.html
      RBAC
        doc & desc:    
http://lists.oasis-open.org/archives/xacml/200712/msg00000.html
    Eric has updated the 5 profiles above (SAML profile was left in 
completed state
      by Anne before she left in Aug). Most of the changes above are to 
upgrade
      to XACML 3.0, mostly renaming elements. One area where Eric found some
 ->   issues that people should review is in the hierarchical profile, 
details of
      which may be found in the desc link above.

3 Issues

 -> New issue:  Eric also noted the 2.0 version of the hierarchical 
profile is broken.
      Data type doesn't work as intended - need 2.0 errata

 -> New issue: from Stephen Hrbacek: Namespace identifiers do not match 
between
       XACML 2.0 specs and xsds. Needs to be added to issue list
          
http://www.oasis-open.org/archives/xacml-comment/200711/msg00000.html

 -> Issue 87: was discussed at the last meeting. Eric has done some
      additional work on it since then:
        http://lists.oasis-open.org/archives/xacml/200711/msg00012.html
      This may be broken in hierarchical profile also, and needs more 
analysis.

4 Other business:

    Prateek: Policy Distribution Proposal from Hal: comments are still
       in progress. For proposal and some of comments so far see following:
        http://lists.oasis-open.org/archives/xacml/200709/msg00019.html
        http://lists.oasis-open.org/archives/xacml/200710/msg00020.html
        http://lists.oasis-open.org/archives/xacml/200710/msg00034.html

    Next meeting:
       Dec 20