Time: 13:00 EDT (GMT-0400) Tel: 513-241-0892 Access Code: 65998 Minutes for 3 November 2011 TC Meeting: I Roll Call Voting Members: Axiomatics David Brossard The Boeing Company Crystal Hayes The Boeing Company Richard Hill Oracle Rich Levinson Oracle Hal Lockhart Individual Bill Parducci EMC Remon Sinnema The Boeing Company John Tolbert Bell Helicopter Textron Inc. Paul Tyson Members: IBM Sridhar Muppidi Observers: OASIS Dee Schur & Minutes: Approve Minutes: 20 October 2011 TC Meeting
http://lists.oasis-open.org/archives/xacml/201110/msg00018.html hal: approved no objection II Administrivia OASIS self reporting attendance: hal: new oasis sw lets you do self-reporting of attendance, we should discuss if we want to do it; we can decide to do at anytime; no strong to push to do it right now. RSA InterOp status hal: There have been some updates. NextLabs is interested in participating. Dee is continuing to look for participants. She also asked if we could do 2.0. My answer was that the participants determine the content, but showing 3.0 seems to be the main reason to have an interop at the current time and that in past some participants had objected to doing the same old thing over again. dee: ready to go to next level; even though not 5 official commitments, appears to be current critical mass of interest; a company "First Point Global" has expressed interest in participating. dee: kmip tc is definitely doing an interop and will have a booth, may help w costsharing oasis booth. dee: many roles to participate, not just prod companies rich: rsa 2008, VFA did the demo system and prod vendors plugged in; detail ref'd on xacml main page:
http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml#expository http://www.oasis-open.org/committees/document.php?document_id=28030&wg_abbrev=xacml dee: will activate interop list, so anyone interested should join that list when available. dee: will try to set up conf call next week to kick off the effort. 15-day Public Review for v3 XACML Core Spec TC admin comments:
http://lists.oasis-open.org/archives/xacml/201110/msg00021.html 15-day Public Review for v3 XACML RBAC Profile TC admin comments:
http://lists.oasis-open.org/archives/xacml/201110/msg00022.html 15-day Public Review for v3 XACML SAML Profile TC admin comments:
http://lists.oasis-open.org/archives/xacml/201110/msg00030.html http://lists.oasis-open.org/archives/xacml/201110/msg00031.html III. Issues Intellectual Property Profile John will look for comments on the list before working on next draft. WD-05 uploaded (Erik):
http://lists.oasis-open.org/archives/xacml/201110/msg00016.html WD-04 attributes Comments (Erik):
http://lists.oasis-open.org/archives/xacml/201110/msg00015.html hal: take this as first issue agenda item: paul: added some terms to glossary: covered resource, ... crux is that some agreement between orgs to grant certain rights for certain resources paul: concern about "ip designee"; terms have different meanings, want to avoid ambiguity; suggest revert to prev defn; not restrictive because of name john: understands point, his reply should address it; assign ip rights outside of resources; what agreement designator is trying to address. paul: "ip agreement" could be a wide range of things for this profile, one size fits all john: "agreement identifier" would that be ok john: thinks this has value on international level john: dublin core should keep in mind paul: range of values for creator refers to class defined in dublin core; may have more ties than we want hal: should use vocab as intended paul: by that rule there is mismatch hal: if finite enumeration we should use, etc. would like to hear args either way; but would want to avoid redefining for non-original purpose paul: would be taking name off agent, hal: maybe a lookup key to find data somewhere else What is "URI equality" ? (xacml-comment)
http://lists.oasis-open.org/archives/xacml-comment/201110/msg00000.html several comments:
http://lists.oasis-open.org/archives/xacml-comment/201110/maillist.html recommended chg to core to address (rich):
http://lists.oasis-open.org/archives/xacml-comment/201110/msg00010.html rich: at minimum should update refs in 3.0 core to refer to rfc3986; in addition, some light might be worth shedding on false positive and false negative Hierarchical actions (remon):
http://lists.oasis-open.org/archives/xacml/201110/msg00019.html several comments in monthly list:
http://lists.oasis-open.org/archives/xacml/201110/maillist.html ray: will postpone until next mtg Values from bag fcn (paul):
http://lists.oasis-open.org/archives/xacml/201110/msg00020.html Standard Performance Test Suite for XACML (xacml-dev)
http://lists.oasis-open.org/archives/xacml-dev/201110/msg00008.html several comments in monthly list:
http://lists.oasis-open.org/archives/xacml-dev/201110/maillist.html XACML and Constrained RBAC (xacml-dev)
http://lists.oasis-open.org/archives/xacml-dev/201110/msg00004.html several comments in monthly list:
http://lists.oasis-open.org/archives/xacml-dev/201110/maillist.html