Re: [xacml-comment] Public Comment

[Anne Anderson <Anne.Anderson@sun.com>]

XACML does not currently have a profile for "Or-BAC" and there is no 
work in progress on this topic.  Your e-mail is the first inquiry we 
have received about it.

Work in the TC is driven by members who are interested in a particular 
topic and are willing to serve as profile editors and contributors.  If 
SVIF is interested in having an XACML profile for Or-BAC, one of your 
members willing to lead such an effort might ask one of the two XACML TC 
co-chairs if you could make a presentation to the TC to gauge interest. 
  If there is sufficient interest, CVIF could join OASIS (if not already 
a member) and one or more CVIF members could then join the XACML TC to 
lead this effort.

It may also be the case that a new profile is not needed, and that 
Or-BAC can be implemented using existing XACML mechanisms.  If you could 
briefly summarize how it differs from ANSI RBAC, perhaps I or others 
could give you some guidance.

Anne Anderson

comment-form@oasis-open.org wrote:
> Comment from: Philippe.Werle@iutv.univ-paris13.fr
> 
> Name: Philippe WERLE
> Title: IGE Systems & Networks
> Organization: CVIF Consortium
> Regarding Specification: Or-BAC
> 
> Organisation Based Access Control :
> 
> I am a contributor in the CVIF consortium. The CVIF consortium's goal is to provide a Identity Federation solution to the 17 public Universities in the Parisian region (Ile de France). Looking through the Oasis Web site and the Liberty Web site, I was unable to find information about the XACML road map in regards of the Or-BAC (Organisation Based Access Control)  model. XACML v3.0 seems to implement an Access Control model in between the RBAC and the Or-BAC models. XACML v2.0 is RBAC (Role Based Access Control) oriented.
> 
> English publication about the Or-BAC model :
> 
> http://www.acsac.org/2003/papers/118.pdf
> http://www-smis.inria.fr/~bouganim/CASC/Publications/ENST_OTM_2003_Administration%20Model%20for%20Or-BAC.pdf
> 
> French publication about the Or-BAC model :
> 
> http://actes.sstic.org/SSTIC04/OrBAC/SSTIC04-article-Cuppens-OrBAC.pdf
> 
> Could you please help,
> Best regards,
> 
> Philippe Werle.
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: xacml-comment-unsubscribe@lists.oasis-open.org
> For additional commands, e-mail: xacml-comment-help@lists.oasis-open.org
> 

-- 
Anne H. Anderson               Anne.Anderson@sun.com
Sun Microsystems Labs          1-781-442-0928
Burlington, MA USA