Minutes of September 15 2005 XACML TC Meeting

[Bill Parducci <bill.parducci@simulalabs.com>]

Michiharu Kudo
Argyn Kuketayev
Tim Moses
Anthony Nadalin
Seth Proctor
Erik Rissanen
David Staggs
Ron Williams
Hal Lockhart
Bill Parducci (minutes)
Anne Anderson

Quorum reached (100% per Kavi)

Agenda:

I.   Minutes from September 1 meeting (as update on list) voted upon:
      Approved unanimously
      No objections

      Oasis Procedural note: Oasis submitted SAML & XACML to ITUT about
      a year ago and it was decided to wait until v2 of each was finished
      and resubmit. Hal is now working on paperwork for XACML to do so.

      New Oasis IPR process - XACML is grandfathered until 2007. There is
      a transition process, this requires a majority of participating
      organizations to agree. XACML has reached this level so if there
      are members who wish to consider initiating the transition process
      please post to the list or contact the Chairs.

II.  F2F Logistics
      Hal has posted the logistics information to the list.

III. Draft 9
      Maximum Delegation Depth has been added.

      Erik wrote a security consideration re: delegation nesting. The
      problem needs further consideration and the TC is encouraged to
      review Erik's discussion.

      Erik suggested that Obligations introduce an issue where
      combination may introduce unintended results where policies with
      and without Obligations are joined.

      Anne: isn't is possible that an Obligation can expand access rather
      than constrict it?

      Erik also raised the issue of what point in time is used for making
      a decision. At the previous F2F the general consensus was that
      attribute evaluation timing is based upon the implementation.

IV. Wish List
     Bill directed the TC to the Wish List for review prior to the F2F

V.  Issues

     See http://wiki.oasis-open.org/xacml/IssuesList for latest info.

meeting adjourned.