Minutes for 3 March 2016 TC Meeting updated - 2

[rich levinson <rich.levinson@oracle.com>]

	next call 3/17/16: 4:30 PM EDT
Time: 2:30 PM EST (-0500 GMT)
Tel: 1-712-775-7031
Access Code: 620-103-760

Minutes for 3 March 2016 TC Meeting - 2nd update:
          (includes: david's link to alfa presentation +
                     martin's suggested chgs to alfa disc + attr profile)

I. Roll Call & Minutes

Voting Members: 7 of 9 (77%) (used for quorum calculation) 

VOTING
Richard Hill
Steven Legg
Rich Levinson
Hal Lockhart
Bill Parducci
Martin Smith
John Tolbert

MEMBER
David Brossard

 bill: we have quorum



  Approve Minutes 18 February 2016
   https://lists.oasis-open.org/archives/xacml/201602/msg00014.html

    hal: any objections to unan consent
          none heard
	  minutes approved


II. Administrivia 

  XACML TC meetings:
    checking earlier minutes, it appears today's mtg (3/3/16) is still @2:30 ET, but
                                        but next mgt (3/17/16) will be @4:30 ET.
      https://lists.oasis-open.org/archives/xacml/201601/msg00042.html:
	"hal: will continue to meet @ 2:30 pm et, until mar 17 we start @4:30"


    hal: next mtg: march 17, 2016:  



  Axiomatics Webinar on OASIS XACML and ALFA
    https://lists.oasis-open.org/archives/xacml/201602/msg00015.html

	link to replay from david:

http://www.axiomatics.com/resources/96-webinars/459-boot-camp-abac-and-xacml-made-easy-using-alfa-to-write-fine-grained-authorization-policies.html

   alfa profile: Hal: any chance to finalize?
     david: will look at it

     richard: "ALFA is freely available?"
     david:  Eclipse plug-in available for non-commercial use,
	 but profile can be implemented by anyone



  XACML [Discussion]
   Perception of XACML - any more thoughts?
   https://lists.oasis-open.org/archives/xacml/201602/msg00007.html

     openaz shut down?
     hal: probably not; doc issues
     hal: see below: tough to understand xacml doc

       in saml had technical overview: anne anderson: couple pages only


	basic issue seems to be that high level intro needed that
	 would give non-technical representation of policies, and
	 have an "advanced" module that would lead into the actual
	 xacml spec.

	hal: list of items that need elaboration; will try to get
	 something started for ref that others can then start to
	 build on or contribute

	if anyone has specific suggestions post to list and we can
	 discuss as group.




III. Issues

  Default behavior for unrecognized resource attributes
   https://lists.oasis-open.org/archives/xacml/201602/msg00006.html
   (latest in thread)
   (no comments @ last mtg - is there a "next steps" on this issue?)

   martin: started drafting an approach to profile that he believes would not
            require change to the core spec.
           Profile would consist of at least one profile-specific resource attribute;
            probably a new resource attrib sub-category or domain (to group mandatory attribs);
            obligation and advice definitions;
           discussion of what functions non-PDP components (PEP/CH/PIP) would have to perform;
            and example Policies illustrating use of the profile.

	hal: suggest go ahead w descr w/o worrying about xacml mechanisms
	 and we can fill in the details; start @ high level basic approach
	  then worry about mapping to xacml particulars:

   hal: any other itens, any one else join? nope

	next call 3/17/16: 4:30 EDT

	mtg adjourned: 2:59PM EST