OASIS eXtensible Access Control Markup Language (XACML) TC

Time: 10:00 am EDT

I. Roll Call
    Hal Lockhart (Chair)
    Bill Parducci (Co-Chair, minutes)
    Erik Rissanen
    Paul Tyson
    Gareth Richards
    Rich Levinson
    Anil Saldhana
    Seth Proctor
    John Tolbert
    Duane DeCouteau
    David Staggs

  Voting Members
    10 of 10 (100% per Kavi)

  Non-Voting
    Prateek Mishra
    Jan Herrmann

II. Administrivia
    Vote to approve Minutes from 13 August 2009 TC Meeting
    APPROVED unanimously

    XSPA submission to Oasis for vote
    Announcement on ballot will be sent out near next month 15th-end  
balloting

    Hal has posted a presentation summarizing Multipol's use of XACML

    Hal noted that the W3C has announced a Call for Participation for  
a workshop in Luxembourg
    http://www.w3.org/2009/policy-ws/cfp

    XACML Status Presentation for ITU-T uploaded by Hal

    The TC is looking for a volunteer to develop a "delta" document  
indicating the changes from v2

    Oasis Identity Management 2009 conference
    John Tolbert will be giving a presentation on the XACML US Export
    Control Profile
    http://events.oasis-open.org/home/forum/2009/tuesdayagenda#a:

III. Issues
    Updated Comments/Issues list:
    http://lists.oasis-open.org/archives/xacml/200909/xls00000.xls

   #28 - PolicySet in RBAC profile
    http://lists.oasis-open.org/archives/xacml/200909/msg00034.html
    Lines 718-720 have been reported as unclear. There is general
    consensus that this passage should be clarified. Erik volunteered
    to post a proposed change.

   #32 - context handler in glossary
    http://lists.oasis-open.org/archives/xacml/200909/msg00037.html
    CLOSED. No action.

   #33 - PIP in RFC
    http://lists.oasis-open.org/archives/xacml/200909/msg00038.html
    CLOSED. No action.

   #36 - policy without rule
    http://lists.oasis-open.org/archives/xacml/200909/msg00039.html
    CLOSED. No action.

   #45 - obligation vs obligation expression
    http://lists.oasis-open.org/archives/xacml/200909/msg00040.html
    PENDING draft from Erik to address consistency issue raised.

   #46 - indeterminate attribute assignment expression
    http://lists.oasis-open.org/archives/xacml/200909/msg00041.html
    PENDING updated draft that explicitly specifies assignments.

   #47 - occurense of attribute assignment expressions
    http://lists.oasis-open.org/archives/xacml/200909/msg00042.html
    PENDING draft from Erik to address consistency issue raised.

   #48 - bag from attribute assignment expression
    http://lists.oasis-open.org/archives/xacml/200909/msg00043.html
    PENDING draft from Erik.

   #49 - identifier of dayTimeDuration
    http://lists.oasis-open.org/archives/xacml/200909/msg00044.html
    PENDING draft from Erik correcting this and notation that identifies
    this identifier for future obsolescence.

   #50 - redundant occurrence indicators in schema
    http://lists.oasis-open.org/archives/xacml/200909/msg00045.html
    PENDING draft.

    #6 - categories for web services
    http://lists.oasis-open.org/archives/xacml/200909/msg00016.html
    CLOSED. No action.

    There was a discussion on how to pursue Jan's concerns about web
    services use cases. The suggestion was made to consider creating
    a new Profile to address this. Hal asked that a member propose
    what would comprise such a Profile (vs. how this may be addressed
    by changing existing Profiles.)  Jan offered to propose
    alternatives to the Multiple Resources and/or Hierarchical
    Resource Profiles.

IV. Pending

   #3 - dynamic RequestContextPath
    http://lists.oasis-open.org/archives/xacml/200909/msg00014.html

   #4 - generalized higher order functions
    http://lists.oasis-open.org/archives/xacml/200909/msg00015.html

   #5 - reverse order in