RE: [ebXML Registry Security] Deliverables etc.

["Damodaran, Suresh" <Suresh_Damodaran@stercomm.com>]

Yes, "managing ACPs" will be a bit larger than we can 
handle for V2 in the time frame - 
What I mean by managing ACP:
	1. using a normative and conforming schema for ACP
	2. describing ACP bootstrapping including,
		defining an ACP for accessing ACPs

-Suresh
	

-----Original Message-----
From: Farrukh Najmi [mailto:Farrukh.Najmi@Sun.COM]
Sent: Thursday, September 06, 2001 5:50 PM
To: Damodaran, Suresh
Cc: 'regrep-security@lists.oasis-open.org'
Subject: Re: [ebXML Registry Security] Deliverables etc.


I support the plan by Suresh.

BTW I recommend we leave ACP to be submitted and otherwsie managed out of
band
in a registry specific way until V3 when xacml
is available. For V2.0 we still need to define ACP including cookie-cutter
ones
in RIM and how it effects authorization. All I am saying
is lets keep ACP management out of RS so we dont have to spec the XML
interface.
We can define RIM ACP class based on IBM's xacl etc.

"Damodaran, Suresh" wrote:

> Here is what I think we agreed to deliver.
> Please comment!
>
> The deliverables for V2.0 are the following
>
> 1. Security Risks document (all)
> 2. Application of XMLDSIG to Registry use cases (data integrity,
> authentication) (Sekhar)
> 3. Cookie cutter access control policies (Sekhar, Farrukh, Suresh)
> 4. Updated RIM and RS to apply (Farrukh)
> 5. Security profile content (all)
>
> How about we target Sept 17 to get the final cut (internal to security
team)
> of 1, 2
> and an early draft of 3 & 5, and a proposal for 4?
> Meanwhile, we post interim versions to the security email list.
>
> Thanks,
> -Suresh
>
> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>

--
Regards,
Farrukh