[xacml] XACML September 12, 2002 Minutes

[Ken Yagen <kyagen@crosslogix.com>]

Title: XACML Conference Call Minutes

XACML Conference Call

Date:  Thursday, September 12, 2002

Time: 10:00 AM EDT

Tel: 512-225-3050 Access Code: 65998

 

Summary

Since we had quorum, we voted to approve the batch of change requests that had previously been discussed. A new item, #40 was also added that generated a lot of discussion and still needs resolution. Carlisle proposed adding a one hour focus group after the TC call to help facilitate completing the specification. Based on discussion, 9/26 deadline may be extended because some feel we need at least two weeks to digest the completed spec before voting on it and there is still a lot of discussion regarding a couple issues.

 

Action Items

1. [Anne] Update Change Request List
2. [Michiharu] Complete XPATH specification once base model of functions complete
3. [TC] Vote on new wording of charter proposed by Hal. http://lists.oasis-open.org/archives/xacml/200208/msg00133.html
4. [Anne, mid-Sept 2002] Get comments to Tim on profile for using LDAP to store policies.
5. [Anne, mid-Sept 2002] Update XML Digital Signature profile.
6. [Anne, mid-Sept 2002] Send proposal for SAML changes based on our Context to XACML TC list.  After TC review and modification, we will send it on to SAML.  Deadline for this is SAML's deadline for finalizing their list for 2.0.
7. [Tim] Separate SAML document to be created in Sept (Lower Priority)
8. [Hal/Konstantin] XACML primer needs to be completed in Sept (Lower Priority)
9. [Polar/Michiharu] Request that Polar or Michiharu post summary of views on #40 after discussion.
10. [Simon] Post updated Schema
11. [Polar] Post functions spec by Friday

 

Votes

Approved minutes of 10/5 TC Call

Approved as batch list, all items in Change Request list marked NQ

 

Proposed Agenda:

10:00-10:05 Roll Call and Agenda Review
10:05-10:10 Vote to accept minutes of September 5 concall
http://lists.oasis-open.org/archives/xacml/200209/msg00026.html
10:10-10:15 Review of Action Items (see 9/5 minutes)
10:15-10:20 Vote on v0.16 technical change requests that have been discussed
10:20-10:55 Discussion of remaining v0.16 technical change requests (all)
10:55-11:00 Discussion of schedule for Committee Spec (Carlisle)

 

Roll Call

Ken Yagen, Crosslogix

Carlisle Adams, Entrust

Tim Moses, Entrust

Don Flinn, Hitachi

Konstantin Beznosov, Hitachi

Michiharu Kudoh, IBM

Steve Andersen, OpenNetwork

Simon Godik, Overxeer

Bill Parducci, Overxeer

Polar Humenn, Self

Suresh Damodaran, Sterling Commerce

 

Raw Minutes (taken by Ken Yagen)

10:08 Agenda additions/changes

 

10:09 Motion to approve minutes from 10/5 passed

 

10:10 Action Item Review

Michiharu to post XPATH function specifications by Monday

Still working to understand base model. If have agreed to data model for functions, can submit the specification quickly.

Outline of contents for primer due

Sent out today by Konstantin. Will review at end if time.

http://lists.oasis-open.org/archives/xacml/200209/msg00079.html

Anne's action items due in mid September. As of last week had not been completed as an was working on conformance tests

Tim to create separate SAML document. Not begun yet.

 

10:15

Change Request vote based on Anne's 9/9 change request email

http://lists.oasis-open.org/archives/xacml/200209/msg00058.html

Ones that state QUORUM are already approved

Proposal is to accept as batch all items that say NQ  by them

Motion to vote passed

Simon would like to remove 38 from the list

 

Remaining items

0008. [Anne] list mandatory vs. non-mandatory functions

            STATUS: POSTPONED (Anne to resubmit with current list)

0017. [Carlisle] 10. "Resource Matching": NotApplicable treated as Permit

STATUS: POSTPONED 9/9 (Anne to draft "open world/closed world" text)

0019. [Carlisle] C. consistent error behavior

            STATUS: POSTPONED 9/9 (Polar to review and recommend action)

0023. [Daniel, Polar] function names, types, semantics

            STATUS: POSTPONED 9/9 (Anne to review XPath 2.0 specifications)

UPDATE: Polar: Estimate document complete by Friday. It is English text describing what will happen and pointers to other sources. It will be a whole section (8-9 pages), not just a table

0026. [Michiharu] Add XPath functions as non-mandatory

            STATUS: POSTPONED 9/9 (Michiharu will update and resubmit)

UPDATE: I want to postpone this change request update until we reach an agreement on a function model.

0031. [Michiharu] Type of XPathVersion element from string=>anyURI

            STATUS: POSTPONED 9/9 (Michiharu to reconsider and resubmit)

UPDATE: REMOVED I would like to change my original change request and propose a change request [0039]. If [0039] is accepted, [0031] disappears. Then Simon's concern is solved. 31 will be removed and new issue 39 will be added as detailed in 9/12 email from Michiharu

0032. [Michiharu] Schema change of AttributeSelector

            STATUS: POSTPONED 9/9 (Michiharu to revise and resubmit)

            Update: Updated Change Request posted 9/12

0035. [Michiharu] AttributeSelectorIndirect

            STATUS: POSTPONED 9/9 (Michiharu will restate and resubmit)

0038. [Simon] Extending XACML semantics with subject-class

            STATUS: POSTPONED 9/9 (Simon to submit use case where *required*)

            UPDATE: REMOVED

 

Discussion of new issue 39

[0039] Proposal: I request to remove "XPathVersion" attribute from AttributeSelector element. This change removes the reason is that we already allow a default value of XPathVersion in Policy and PolicySet elements. Since the minimum unit of the policy rules are Policy element, I think it is sufficient to specify XPath version information at a policy level, not at each AttributeSelector level. Policy writer who uses AttributeSelector must specify the xpath version in PolicyDefaults or PolicySetDefaults element. The value of XPath 1.0 version is " http://www.w3.org/TR/1999/Rec-xpath-19991116".

 

New issue #40: Semantics of sequences proposed by Simon/Michiharu

There is a proposal by Michiharu and a lot of discussion around this issue.

http://lists.oasis-open.org/archives/xacml/200209/msg00071.html

Discussion of list processing functions, ordering of sequences, etc.

 

Some discussion to add 1 hour focus group call following TC calls on Thursdays

Will we reach committee spec in 2 weeks per schedule. Tim feels we need final document in hand for at least 2 weeks to let things sink in.

 

Request that Polar or Michiharu post summary of views after discussion.