[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: RE: [xacml] New core and multiple resource profile
I don't know what you mean by Meta Schema. We are planning to advance the metadata profile. I would think that Obligation priorities would have to be defined in conjunction with either the Obligation or the Obligation family. Hal > -----Original Message----- > From: Bill Parducci [mailto:bill@parducci.net] > Sent: Tuesday, March 03, 2009 12:10 PM > To: hal.lockhart@oracle.com > Cc: Erik Rissanen; XACML TC > Subject: Re: [xacml] New core and multiple resource profile > > My thinking is that this information must be defined at the "root" > level of the PDP, which to me suggests that it be defined in the > Context Schema. I don't think that it can be "self-referential" (i.e. > a Policy construct) since that will invariably lead to ambiguity. > > Is the consensus that the PDP "meta" schema been scrapped in v3? > > thanks > > b > > On Mar 3, 2009, at 8:32 AM, Hal Lockhart wrote: > > > I was looking at the Obligation family draft this weekend and I > > noticed that for Exclusive mode, Obligations are supposed to have a > > priority associated with them. However, I cannot find priority > > anywhere. Is this supposed to be in the core schema? Or is there > > some reserved attribute which will contain the obligation priority? > > If it needs to go in the core schema we should do it now. > > > > Hal > > > >> -----Original Message----- > >> From: Erik Rissanen [mailto:erik@axiomatics.com] > >> Sent: Tuesday, March 03, 2009 5:26 AM > >> To: XACML TC > >> Subject: [xacml] New core and multiple resource profile > >> > >> All, > >> > >> I have posted new drafts of the core and the multiple resource > >> profile. > >> See the change logs and tracked changes for details. > >> > >> As far as I can tell, we don't have any open issues on the following > >> specs: > >> > >> - Core > >> - Multiple resource > >> - Administration > >> - Privacy > >> - SAML > >> - Dsig > >> > >> The hierarchical profile is being discussed currently and there was > >> discussion about improving the RBAC profile. > >> > >> The proposed work on the RBAC profile seems in very early stages > >> and the > >> issue (policies about management of roles) is a major topic, so I > >> propose that we don't bring this in 3.0. > >> > >> So, could we agree on a feature freeze on the above mentioned > >> profiles? > >> If so, all of the expect hierarchical are ready for review before > >> going > >> to committee draft. > >> > >> I also propose that if we don't get resolutions on the issues in the > >> hierarchical profile soon and it would appear that there are major > >> changes required, then we use the old version of that profile. > >> However, > >> my understanding is that Rich has pretty much completed the work on > >> that. I haven't had the time to review it myself yet, but I will do > >> so now. > >> > >> So, given the above, can we agree on the following? > >> > >> - everybody reviews the above mentioned profiles > >> - We correct any mistakes > >> - I will fix the metadata, references, namespaces, etc, > >> - Go CD with the above > >> > >> One final issue: we need to update the acknowledgements section of > >> the > >> core. What goes in there? My name is not in there, and I would like > >> to > >> include it. :-) I presume that we keep all the old names, right? John > >> Tolbert has requested to be added. Anybody else? > >> > >> Best regards, > >> Erik > >> > >> > >> --------------------------------------------------------------------- > >> To unsubscribe from this mail list, you must leave the OASIS TC that > >> generates this mail. Follow this link to all your TCs in OASIS at: > >> https://www.oasis-open.org/apps/org/workgroup/portal/ > >> my_workgroups.php > >> > > > > > > --------------------------------------------------------------------- > > To unsubscribe from this mail list, you must leave the OASIS TC that > > generates this mail. Follow this link to all your TCs in OASIS at: > > https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php > > >
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]