XACML Work Items, Version 1.4

[Anne Anderson <Anne.Anderson@Sun.COM>]

The long-awaited update to the XACML TC Work Item list is
attached.  I included only the work items that are currently
open, and started the numbering over.

Note: I submitted version 1.3 to the repository, then discovered
some formatting errors, so submitted corrections as version
1.4.

Anne
-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692

Title: OASIS XACML TC Work Items

OASIS XACML TC Work Items

Maintainer: Anne Anderson
Version: 1.4
Updated: 04/06/22 (yy/mm/dd)

Contents

• WI01. uri matching functions
• WI02. identifiers for profiles and other optional features
• WI03. requests for multiple resources
• WI04. changes to spec for requests for multiple resources
• WI05. changes to spec for hierarchical resources
• WI06. hierarchical resources
• WI07. role based access control
• WI08. spec editorial review
• WI09. use case for non-XML hierarchical resources
• WI10. use case for XML hierarchical resources
• WI11. SAML convergence
• WI12. delegation
• WI13. backwards compatibility section

WI01. uri matching functions

Status: Tim has issued draft requirements and proposal.

Action needed: discuss and approve.

References:

• Subject: URL/URI match functions
  From: Tim Moses
  Date: Fri, 18 Jun 2004 13:56:39 -0400

WI02. identifiers for profiles and other optional features

Status: Tony suggested we have some way of identifying which optional features or profiles a given implementation supports, or that a given request or policy requires.

Action needed: We need to decide whether this is worth doing, and if so, proposal and schema elements needed.

References:

• Subject: proposal for identifying optional features
  From: Anne Anderson
  Date: Tue, 22 Jun 2004 10:55:05 -0400

WI03. requests for multiple resources

Status: Anne has issued a profile that contains the various options that have been proposed for expressing a decision request for more than one resource.

Action needed: This profile needs to be discussed and approved.

References:

• Subject: XACML Profile for Requests for Multiple Resources, Draft 02
  From: Anne Anderson
  Date: Fri, 04 Jun 2004 14:49:11 -0400

WI04. changes to spec for requests for multiple resources

Status: Anne has posted a list of proposed changes.

Action needed: This needs to be discussed.

References:

• Subject: Modifications to XACML 2.0 for Requests for Multiple Resources
  Date: Thu, 17 Jun 2004 11:20:31 -0400

WI05. changes to spec for hierarchical resources

Status: Anne has posted a list of proposed changes.

Action needed: This needs to be discussed.

References:

• Subject: Hierarchical Resources: changes to existing spec
  From: Anne Anderson
  Date: Tue, 15 Jun 2004 13:15:30 -0400

WI06. hierarchical resources

Status: One remaining open issue: "document-id" Attribute.

Action needed: [Michiharu] review "document-id" Attribute vs. document-id in a resource-id Attribute. Then approve.

References:

• Subject: XACML Profile for Hierarchical Resources, Draft 04
  From: Anne Anderson
  Date: Thu, 03 Jun 2004 12:53:00 -0400
• Subject: Open issues and action items for Hierarchical Resources
  From: Anne Anderson
  Date: Thu, 10 Jun 2004 11:50:56 -0400

WI07. role based access control

Status: Anne posted a new draft with one substantive change (a RECOMMENDED AttributeId to use for "role", with anyURI DataType). She is still trying to figure out whether Aleksey Studnev's comments should be incorporated.

Action needed: [Anne] finish review and issue new draft if necessary, then call for vote.

References:

• Subject: Groups - wd-xacml-rbac-profile-02.1.pdf uploaded
  From: Anne Anderson
  Date: 18 May 2004 14:40:10 -0000
• Subject: re: alternative "isCallerInRole" implementation/model
  From: Anne Anderson
  Date: Thu, 10 Jun 2004 14:19:30 -0400

WI08. spec editorial review

Status: A few comments have been posted.

Action needed: [All] Every TC member should pick a segment of the spec and review it for editorial consistency, clarity, etc.

WI09. use case for non-XML hierarchical resources

Status: Anne has published a draft use case description.

Action needed: Discuss and approve

References:

• Subject: Use case for nonXML hierarchical resources
  From: Anne Anderson
  Date: Thu, 17 Jun 2004 09:07:25 -0400

WI10. use case for XML hierarchical resources

Status: Michiharu agreed to write up a use case. Perhaps the example in the existing spec is sufficient, and should be moved from core spec to a special use case document.

Action needed: [Michiharu] publish a use case.

WI11. SAML convergence

Status: On 27 May 2004, TC approved "XACML Profile for SAML 2.0 Attributes" and sent to SSTC. That just covers Attribute formats and is progressing in the SSTC. XACML Profile for SAML covers XACML uses of SAML. Draft 02 published 10 March 2004. Waiting for SAML 2.0 freeze.

Action needed: [Anne] when SAML 2.0 frozen, issue updated draft.

References:

• Subject: XACML Profile of SAML V2.0 Attributes, Draft 03
  From: Anne Anderson
  Date: Tue, 25 May 2004 12:07:36 -0400
• Subject: Groups - wd-xacml-saml-profile-02.pdf uploaded
  From: Anne Anderson
  Date: 10 Mar 2004 15:35:10 -0000

WI12. delegation

Status: Frank Siebenlist described a way of supporting delegation at the F2F which generated interest. This would be a separate profile. Item for XACML 2.0 is whether to add <Issuer> element to core schema.

Action needed: Decide whether to add <Issuer> element to core schema.

References:

• Subject: summary of Frank's delegation proposal
  From: Anne Anderson
  Date: Tue, 18 May 2004 14:20:52 -0400

WI13. backwards compatibility section

Status: Waiting for spec to reach stability.

Action needed: [Bill] write new section for spec.