Minutes for 19 November 2009 TC Meeting

["Rich.Levinson" <rich.levinson@oracle.com>]

Time: 10:00 am ET
Tel: 513-241-0892 Access Code: 65998

Minutes for 19 November 2009 TC Meeting:

10:00 - 10:05 Roll Call (partial may have missed couple)

duane
jan
seth
erik
paul
dilli
rich
bill
ibm covering for vernon

 have quorum

Approve Minutes of 12 November 2009 TC Meeting
http://lists.oasis-open.org/archives/xacml/200911/msg00013.html

 approved no objection

10:05 - 10:10 Administrivia

Interoperability Demonstration Opportunity for OASIS Security-related TCs at RSA 2010
  (see email copied after end of agenda below:)

    RSA 2010, see end of agenda for details


F2F Logistics: layout agenda
Redwood City, Oracle
  Tue Dec  8 (8AM-5PM)
  Wed Dec  9 (8AM-5PM)
  Thu Dec 10 (8AM-5PM)
  http://lists.oasis-open.org/archives/xacml/200911/msg00024.html

 wk after tg will have room #s, etc.
 suggestions on logistics

F2F ref again: hotels etc:  
  http://lists.oasis-open.org/archives/xacml/200911/msg00009.html

F2F Observers invitation discussion:
  http://lists.oasis-open.org/archives/xacml/200911/msg00016.html

    need to follow any oasis policies, etc.


Core spec updated and brief description of status from Erik:
  http://lists.oasis-open.org/archives/xacml/200911/msg00020.html
  http://lists.oasis-open.org/archives/xacml/200911/msg00021.html

    Erik: has put all issues in from core


  General F2F: 

    Bill: will set up wiki page to consolidate issues, topic for mtg
    Erik: make chgs in evening to keep up w day; goal is cd2
    Bill: even if not quorum, put items in vote at thu call for
	full consideration;
    Paul: teleconf for mtg sessions: 
    Rich: we will try to utilize oracle web conf capability
    Erik: would like proposals on all issues for f2f
    Bill: one more voice call dec 3: we should settle agenda at
	that time; 80-90% assurance on agenda topics
     

10:10 - 11:00 Issues

 Issue list reference (updated from agenda, to the following msg, doc):
  http://lists.oasis-open.org/archives/xacml/200911/msg00021.html
  http://lists.oasis-open.org/archives/xacml/200911/xls00003.xls


 Proposal from Erik to restrict policies to element, attr, text nodes:
  http://lists.oasis-open.org/archives/xacml/200911/msg00017.html

    Jan: processing instructions, comments not included
    Erik: it is attr selector, not xpath matching
    Paul: seem unnecessary to exclude
    Erik: may refer to resource content; xml resource one would
	access based on xml comments possibly; part of resource,
	not part of policy; processing instructions may use these
	for appl-specific info

     	issue will be closed (not in spec update, so no action)


 Possible issue w Inconsistency of Obligation Enforcement: Erik, Bill:
  http://lists.oasis-open.org/archives/xacml/200911/msg00019.html

    Bill agrees w proposal; wording refers to pep constrained to
	follow bias of pdp on rcving obl it does not understand.

	change approved


 Proposed schema change for policies and discussion from
  David Chadwick and response from Erik:
   http://lists.oasis-open.org/archives/xacml/200911/msg00023.html

    Erik: David proposed req ctx schema for ext pts xml any, where
	can put proprietary policy lang things; doesn't make sense
	to std on any policies in fmt; suggest using saml/xacml
	mechanism
    Rich: sees it as potentially disruptive, effectively allowing
	elements as children of PolicySet
    Bill: proprietary elements don't make sense; need further info
	to be considered;

	defer topic until more info from David addressing concerns
	 in email and minutes


 Proposal for issue 19 from Jan:
  http://lists.oasis-open.org/archives/xacml/200911/msg00025.html

    Erik: should be individual resource-id as std case; 
    Paul: this should be a new issue, will send email

     	defer until after refactoring


 Proposal for issue 4 from Jan:
  http://lists.oasis-open.org/archives/xacml/200911/msg00026.html

    Jan: issue is ordering of parameters make things too restrictive,
	esp when using xacml extensibility
    Jan: any function; assign to each element in bag
    Erik: need another week to process info
    Bill: possibly an F2F topic


*** End of Agenda ***

Begin forwarded message on Interoperability Demonstration Opportunity:

> From: "Jane Harnad" <jane.harnad@oasis-open.org>
> Date: November 18, 2009 12:40:43 PM PST
> To: <bill@parducci.net>, <hal.lockhart@oracle.com>, <Subhash.Sankuratripati@netapp.com>, <robert.griffin@rsa.com>, <n-sakimura@nri.co.jp>, <mgoodner@microsoft.com>, <tonynad@microsoft.com>, <klawrenc@us.ibm.com>, <ckaler@microsoft.com>, <mikemci@us.ibm.com>, <hardjono@mit.edu>, <Timothy.Bruce@ca.com>, <stefan@drees.name>, <cruellas@ac.upc.edu>, <drummond.reed@xdi.org>, <peter.davis@neustar.biz>, <david.staggs@va.gov>, <cathy.tilton@daon.com>, <kent.spaulding@skyworthttg.com>
> Cc: "'Dee Schur'" <dee.schur@oasis-open.org>
> Subject: Interoperability Demonstration Opportunity for OASIS Security-related TCs at RSA 2010
>
> Dear TC Chairs,
>
>  
>
> OASIS is planning to host an interoperability demonstration area on the show floor at the upcoming RSA 2010 Conference & Exposition.
>  
>
> RSA 2010 Conference & Exposition
>
> 1-5 March 2010
>
> San Francisco, California
>
> http://www.rsaconference.com/2010/usa/index.htm
>
>  
>
> A couple TCs have already expressed interest.  If you’re TC might have an interest in holding an interoperability demonstration at this event, please let me by 11/27.  Additional demonstration details, including: participant benefits and fees will be forwarded once we’ve determined the amount of space required.
>
>  
>
> Regards, Jane
>
>