Minutes for 16 June 2011 TC Meeting

[rich levinson <rich.levinson@oracle.com>]

Time: 13:00 EDT
Tel: 513-241-0892
Access Code: 65998

Minutes for 16 June 2011 TC Meeting:

I Roll Call

Voting Members

Erik Rissanen 	Axiomatics
Doron Grinstein BiTKOO
David Choy 	EMC
Remon Sinnema 	EMC
Gregory Neven 	IBM
Jan Herrmann 	Individual
Anthony Nadalin Microsoft
Rich Levinson 	Oracle
Hal Lockhart 	Oracle
David Staggs 	Veterans Health Administration

Members

David Brossard 	Axiomatics
	
	9 out of 17 at start of mtg; just made quorum

  &   Approve Minutes:
   9 June 2010 TC Meeting
    http://lists.oasis-open.org/archives/xacml/201106/msg00025.html

	hal: no objections heard; minutes approved


II Administrivia
   F2F - June 28th, 29, 30th in Lexington, MA
    Online Poll: (Attend in person: 9, by phone: 3)
   hal/john: posted boeing list of nearby hotels in the 128/Burlington area
     http://lists.oasis-open.org/archives/xacml/201106/msg00026.html

	address: 1 Network Drive, Burlington (old Sun campus)

  ->   hal: will put up agenda, to debate on list

    OASIS event: no interest at this time
	
   JSON Profile starting oasis document process:
    http://lists.oasis-open.org/archives/xacml/201106/msg00033.html
    http://lists.oasis-open.org/archives/xacml/201106/msg00032.html

     david: http/json req/rsp schema for interface will generate starting
	from oasis base (above links)

    Current draft:

III Issues

   Combiner parameters: (recommends clarifying text)
    erik: http://lists.oasis-open.org/archives/xacml/201106/msg00035.html
     refs orig notion: http://lists.oasis-open.org/archives/xacml/200404/msg00026.html

      erik: above link is michiharu, polar discussion on combiner params
	CombinerParameters apply to current alg in Rule, Policy, or PolicySet
  ->     will make proposal to update the doc

     hal: ray posted some more typos; ok w current draft?
     erik: still waiting on what obls get posted
	as spec is written; probably not most sensible; if you hit
	several permits then they all collect;
     hal: don't want to inhibit performance options;
     rich: we should define default behavior, such as first found
	for both ordered and unordered,
  ->  rich: will propose specific text in specific locations that also
	keeps behavior the same.

  ->  erik: will produce updated draft before f2f

   Attribute predicate profile for SAML and XACML - ray comment
    http://lists.oasis-open.org/archives/xacml/201105/msg00088.html

     greg: have not updated the xacml piece of this yet; hopes to have
	draft before the f2f
       also abac discussion on list zbac: looked at, first thought yes,
	then ray looked at but both now have understanding that this
	profile would not help impl zbac; see prev emails;
      hal: this doesn't imply that xacml does not apply, only that
	this specific profile does not address the zbac issues, that
	will require review of specs;


   Resource Hierarchies: (no explicit issue, basically looking for advice)
    orig (Laird): http://lists.oasis-open.org/archives/xacml-users/201106/msg00000.html
    laird: http://lists.oasis-open.org/archives/xacml-users/201106/msg00001.html
    nick/erik: http://lists.oasis-open.org/archives/xacml-users/201106/msg00003.html
    david b: http://lists.oasis-open.org/archives/xacml-users/201106/msg00004.html
    rich: http://lists.oasis-open.org/archives/xacml-users/201106/msg00007.html
    doron/erik: http://lists.oasis-open.org/archives/xacml-users/201106/msg00008.html

     rich: not clear whether there was real issue, but there are some interesting
	aspects discussed in above emails
     hal: some idioms for hier might be good in impl guide
	also people are familiar w some scheme and not aware there
	are different types of schemes; don't understand why xacml
	so general, instead of "their way".

   XACML Metadata (putative)
    http://lists.oasis-open.org/archives/xacml/201105/msg00004.html

     hal: formal way to express info (done in saml, for example), just
	define symbols rather than specific ways to implement.

     hal: no more issues that anyone wants to discuss
	stragglers:
	next call is next week: thu 6/23
	adjourn 1:36PM EDT


   Obligations/Advice combining(msgs since last mtg)
    orig: http://lists.oasis-open.org/archives/xacml/201106/msg00007.html
    erik: http://lists.oasis-open.org/archives/xacml/201106/msg00029.html

   WD-20 Questions/Issues
    http://lists.oasis-open.org/archives/xacml/201106/msg00011.html
    erik: http://lists.oasis-open.org/archives/xacml/201106/msg00034.html
    rich: http://lists.oasis-open.org/archives/xacml/201106/msg00036.html

  Carried over issues:

   XACML PEP (nee PDP REST Interface)
    http://lists.oasis-open.org/archives/xacml/201106/msg00009.html

   Indeterminate Policy Target
    http://lists.oasis-open.org/archives/xacml/201105/msg00114.html

   XACML Implementers Guide
    http://lists.oasis-open.org/archives/xacml/201105/msg00113.html

   Attribute predicate Profile for SAML and XACML
    http://lists.oasis-open.org/archives/xacml/201104/msg00080.html

   Break The Glass Profile
    http://lists.oasis-open.org/archives/xacml/201104/msg00082.html

   Profile Examples (Hierarchy)
    http://lists.oasis-open.org/archives/xacml/200910/msg00024.html

   PIP directive (additional information directives)
    http://lists.oasis-open.org/archives/xacml/201010/msg00005.html

   Usage of status:missing-attribute in case of an AttributeSelector
    http://lists.oasis-open.org/archives/xacml/201104/msg00003.html

   "Web Friendly" Policy Ids
    http://lists.oasis-open.org/archives/xacml/201103/msg00046.html

   Specifying a specific associated Resource in a Policy (Sticky Policies)
    http://lists.oasis-open.org/archives/xacml/201103/msg00012.html