OASIS eXtensible Access Control Markup Language (XACML) TC

TC Admin public review feedback for XACML 3.0

  • 1.  TC Admin public review feedback for XACML 3.0

    Posted 05-31-2012 19:12
    Members of the XACML TC, In preparing the latest version of XACML 3.0 for its public review, we noted a couple of things that we thought we should bring to your attention: 1. Two normative references that you may wish to update: - [Hier] XACML v3.0 Hierarchical Resource Profile Version 1.0. 11 March 2010. Committee Specification Draft 03. http://docs.oasis-open.org/xacml/3.0/xacml-3.0-hierarchical-v1-spec-cd-03-en.html - [XACMLAdmin] OASIS Committee Draft 03, XACML v3.0 Administration and Delegation Profile Version 1.0. 11 March 2010. http://docs.oasis-open.org/xacml/3.0/xacml-3.0-administration-v1-spec-cd-03-en.doc Both of these are currently approved as Committee Specifications: - [Hier] XACML v3.0 Hierarchical Resource Profile Version 1.0. 10 August 2010. Committee Specification 01. http://docs.oasis-open.org/xacml/3.0/xacml-3.0-hierarchical-v1-spec-cs-01-en.html . and - [XACMLAdmin] XACML v3.0 Administration and Delegation Profile Version 1.0. 10 August 2010. Committee Specification 01. http://docs.oasis-open.org/xacml/3.0/xacml-3.0-administration-v1-spec-cs-01-en.html . You could make your references to the Latest version links for the specifications that would always stay up to date: http://docs.oasis-open.org/xacml/3.0/xacml-3.0-hierarchical-v1-spec-en.html http://docs.oasis-open.org/xacml/3.0/xacml-3.0-administration-v1-spec-en.html 2. We noted that inline citations to items in the References section aren't hyperlinked. For example in Section 2.5, the second sentence includes "... the most common application of this idea is the subject's role [RBAC]." Typically, specification documents link the '[RBAC]' back to its entry in the Normative References section for the reader's convenience. 3. A number of the references did not have a URI available (we realize that some are to print publications but if you can locate URLs it makes it more convenient for your readers) and one (XPathFunc) had a URL but it wasn't hyperlinked. And a couple of operational / procedural notes/requests as well: 1. You submitted a different document link in the ticket for the public review and the ticket for the CSD creation. You don't need to create a separate document for the public review - we will create that document from the one used for the CSD. 2. Working draft 23, submitted for the CSD, had change tracking turned on and the changes not accepted. In order to create the CSD and the CSPRD, we had to first accept all changes and turn change tracking off. Please give them to us in the future with the changes already accepted. The reason is that our policy is not to tamper with your content at all if we can help it. I do not want to blur the lines around who is responsible for the content of the specification. If we change anything - even just accept changes - and then something is later found wrong, it could be unclear who is responsible for the error. I prefer to keep a very bright line - in a CSD, if it is above start of section 1, I did it. If it is south, it belongs to you. 3. The working draft also had a figures directory with one gif in it. No harm done but it meant we had to spend time figuring out whether that was needed or not. If you could avoid sending along anything extra, it will help us get your content done faster. Thanks much & nice work on v3.0. Let us know if you have any questions. Best, /chet ---------------- Chet Ensign Director of Standards Development and TC Administration OASIS: Advancing open standards for the information society http://www.oasis-open.org Primary: +1 973-996-2298 Mobile: +1 201-341-1393 TC Administration information and support is available at http://www.oasis-open.org/resources/tcadmin Follow OASIS on: LinkedIn:     http://linkd.in/OASISopen Twitter:         http://twitter.com/OASISopen Facebook:   http://facebook.com/oasis.open