[xacml] Minutes for 21 July 2016 TC Meeting - Updated

[rich levinson <rich.levinson@oracle.com>]

Time: 4:30 PM EDT (-0400 GMT)
Tel: 1-712-775-7031
Access Code: 620-103-760

Minutes for 21 July 2016 TC Meeting

I. Roll Call & Minutes Roll Call

voting:
Mohammad Jafari	Voting Member
Steven Legg	Voting Member
Rich Levinson	Secretary
Bill Parducci	Chair
Martin Smith	Voting Member

non-voting:
Remon Sinnema	Member

Voting Members: 5 of 6 (83%) (used for quorum calculation)

   bill: we have quorum


   bill: additions to agenda?

   martin: would like input on idef


   Approve Minutes 7 July 2016
    https://lists.oasis-open.org/archives/xacml/201607/msg00012.html

	bill: no objections heard: minutes approved

    II. Administrivia

     bill: added calendar entries from now thru Nov

    Standardization Status of Documents
     https://lists.oasis-open.org/archives/xacml/201607/msg00018.html

 martin: 2 nomination forms to be submitted for IDESG Stds Registry:
          one for XACMLv3 Core Spec, and a second for a reasonable set of Profiles.
	
         Almost final, except waiting for opinion on whether to include anything on xspa;
          and whether to include TSCP as a "trust framework" that has "adopted" XACML.
         Hierarchical, and Multi-decision Profiles are included.

        rich: reviewed hier/multi-decision descriptions in doc martin sent: looks ok

	list of Profiles in nomination draft: saml, rest, json, rbac, hier, multi, dsig, ipc, ec-us
	Both drafts posted to TC list.

	1. SAML Profile Version 2.0 Committee Spec 02, 19 August 2014
	2. REST Profile of XACML v3.0 V-1.0 Committee Spec 02, 23 Nov 2014
	3. JSON Profile of XACML 3.0 V-1.0 Committee Spec 01, 11 Dec 2014
	4. Core and Hierarchical Role Based Access Control (RBAC)
	    Profile V-1.0 Committee Specification 02, 23 Oct 2014
	5. Hierarchical Resource Profile V-1.0, Committee Spec 02, 18 May 2014
	6. Multiple Decision Profile V-1.0, Committee Spec 02, 18 May 2014
	7. XML Digital Signature Profile V-1.0, Committee Spec 02, 18 May 2014
	8. Intellectual Property Control (IPC) Profile V-1.0 OASIS Standard, 19 January 2015
	9. Export Compliance-US (EC-US) Profile V-1.0 OASIS Standard, 19 Jan 2015


	martin: IDESG standards group meets on alternate thursdays before xacml tc,
	 so a cycle adds 4 weeks to the process, so recommends expediting


    2 new impls added to tc home page:
     https://lists.oasis-open.org/archives/xacml/201607/msg00017.html

	rich: 2 new interesting additions to the list of impls;
	  https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml#other
	 1. "AuthzForce" is complete pdp:
	       w java api:
	        https://authzforce.ow2.org/
	       and rest api:
	        http://catalogue.fiware.org/enablers/authorization-pdp-authzforce
	 2. "FACPL" (Formal Access Control Policy Language) is policy analyis tool,
	      user guide:
	       http://facpl.sourceforge.net/guide/facpl_guide.html
	
	      w xacml/facpl comparison in sec 9.1 of following doc:
	       http://local.disia.unifi.it/wp_disia/2016/wp_disia_2016_05.pdf

    Errata: Steven comments:

      item 4 - status codes
        https://lists.oasis-open.org/archives/xacml/201607/msg00013.html
	steven, rich: more clarity on wording needed:
	 bill: move forward and clarify the prose
	 bill: will talk to richard

      item 3 - xpath expressions
        https://lists.oasis-open.org/archives/xacml/201607/msg00014.html
	steven: namespace declarations: attr namespace issue
	  recommends clarifying attr w namespace as officially consistent w xml specs

      attr selector:
        https://lists.oasis-open.org/archives/xacml/201607/msg00015.html
	steven: indeterminate error: when cat doesn't have content element child
	 not ref'd would cause you to fall back on must be present: should be
	 consensus based on email threads

      start tag sec 5.44:
        https://lists.oasis-open.org/archives/xacml/201607/msg00016.html
	steven: email explains

III. Issues

	none

   Meeting adjourned:

	next mtg: Aug 4


---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that generates this mail.  Follow this link to all your TCs in OASIS at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php