RE: [xacml] Important - Immediate action required

[Hal Lockhart <hal.lockhart@oracle.com>]

First, thanks for voting "Yes" anyway.

The reason has to do with history. The document was written at the end of 2012 based on our submissions that year.

Yesterday when I went to edit it I had to decide what to do with that text. In my own view, which is based on the history of 1.0, 1.1 and 2.0 I do not really consider REST, JSON, IPC or EC to be part of 3.0. My first reaction was to remove the mention of IPC and EC, but I was reluctant for political reasons to remove any of the existing text, unless it was incorrect. The alternative was to go thru all the current work in various stages of completion and decide which Profiles to list and which not to. Instead I decided to leave that section alone in the interests of expediency.

In the long run this should not matter. What the TC needs to do is to bring the new profiles to the OASIS Standard level as soon as we can and then they will be blessed as ITU-T recommendations. The document under discussion is non-normative and simply intended as a teaser to those who are familiar with 2.0 and wonder what 3.0 is about.

I also realize that my notion of XACML 3.0 is now somewhat obsolete. It made sense when we treated the core and all the infrastructure Profiles as a single OASIS Standard, but makes less sense with each document progressing on its own track. Going forward the important distinction is likely to between vertical Profiles, which pertain only to a particular domain and horizontal Profiles which apply broadly to many access control situations. (Even that distinction may blur. The DLP & NAC Profile now contains modified datatypes and new functions.)

Hal

> -----Original Message-----
> From: Sinnema, Remon [mailto:remon.sinnema@emc.com]
> Sent: Tuesday, January 14, 2014 1:57 AM
> To: Hal Lockhart (hal.lockhart@oracle.com)
> Cc: xacml@lists.oasis-open.org
> Subject: RE: [xacml] Important - Immediate action required
> 
> Hal,
> 
> This document mentions the new IPC and EC-US profiles, but not the REST
> profile.
> 
> 
> Thanks,
> Ray
> 
> 
> > -----Original Message-----
> > From: xacml@lists.oasis-open.org [mailto:xacml@lists.oasis-open.org]
> > On Behalf Of Hal Lockhart
> > Sent: Tuesday, January 14, 2014 3:54 AM
> > To: xacml@lists.oasis-open.org
> > Subject: [xacml] Important - Immediate action required
> >
> > TC Members,
> >
> > You may recall that at our last meeting before the holidays we
> > discussed a document prepared by ITU-T which describes the major
> > changes made between XACML 2.0 and 3.0. It was intended that we take
> up the matter last Thursday on our regular call and endorse the
> correctness of the document. Unfortunately that item did not make it
> onto the agenda.
> >
> > I have been informed that ITU-T needs us to take action prior to our
> > next regular meeting. I also noticed last week that in addition to a
> > previously discussed omission of not making it clear which features
> were in core versus Profiles, the document omitted to mention the new
> per-decision policy feature in the SAML Profile.
> >
> > I therefore extracted the text from the document and modified it,
> > identifying where the changes occur and describing the new SAML
> > feature. I have created an electronic ballot to endorse this modified
> document. The document is attached to the ballot and can also be found
> in the repository. The edits are noted in colored text.
> >
> > The ballot will close next Monday, Jan 20 at midnight ET. Please vote
> as soon as possible. The link to the ballot is:
> >
> > https://www.oasis-
> open.org/apps/org/workgroup/xacml/ballot.php?id=2562
> >
> > Hal
> >
> > ---------------------------------------------------------------------
> > To unsubscribe from this mail list, you must leave the OASIS TC that
> > generates this mail.  Follow this link to all your TCs in OASIS at:
> > https://www.oasis-
> open.org/apps/org/workgroup/portal/my_workgroups.php
> >
>