Minutes for 12 October 2017 TC Meeting

[rich levinson <rich.levinson@oracle.com>]

Time: 4:30 PM EDT (-0400 GMT)
Tel: 1-712-775-7031
Access Code: 620-103-760

Minutes for 12 October 2017 TC Meeting

I. Roll Call & Minutes

 Attendees:

    hal
    bill
    steven
    martin
    rich

  bill: we have quorum


 Approve Minutes 14 September 2017
  https://lists.oasis-open.org/archives/xacml/201709/msg00005.html

   hal: any obj unan consent? none heard.
         minutes approved


II. Administrivia

  Hal's status on specs and statements of use:
    https://lists.oasis-open.org/archives/xacml/201709/msg00001.html

  Ballots for JSON and REST profiles as candidate OASIS Standards:
   https://lists.oasis-open.org/archives/xacml/201710/msg00002.html

    The ballots open 06 October 2017 at 00:00 UTC and close 12 October 2017.

    hal: As of this time, both ballots unan approved.
         tc probably has no further reqd action before publish

   Ballot requests:
    REST Profile of XACML v3.0 Version 1.0
     https://lists.oasis-open.org/archives/xacml/201710/msg00001.html
    JSON Profile of XACML 3.0 Version 1.0
     https://lists.oasis-open.org/archives/xacml/201710/msg00000.html


  Time of upcoming mtgs:

   hal: next mtg sched after daylight time switches to std time
    so next mtg in 4 weeks @ 2:30 PM EST


  IDESG:
   Fwd: [Idesg_members] IDESG Adoption of Standards - Update
    jamie clark:
     https://lists.oasis-open.org/archives/xacml/201710/msg00003.html

      Happy day, IDESG’ers!
      All four (4) of the standards presented at the Plenary last month,
       upon which the membership voted during the second reading the week following the Plenary,
       were approved for adoption!

      FIDO Alliance, Universal Second Factor (U2F) 1.0 specification
      FIDO Alliance, Universal Authentication Framework (UAF) 1.0 specification
      (OASIS), eXensible Access Control Markup Language (XACML) 3.0 Core Specification,
      XACML Profiles:
        SAML Profile V-2.0 Committee Spec 02, 19 Aug 2014
        REST Profile of XACML 3.0 V-1.0 Committee Spec 02, 23 Nov 2014
        JSON Profile of XACML 3.0 V-1.0 Committee Spec 01, 11 Dec 2014
        Core and Hierarchical RBAC Profile V-1.0 Committee Spec 02, 23 Oct 2014
        Hierarchical Resource Profile V-1.0, Committee Spec 02, 18 May 2014
        Multiple Decision Profile V-1.0, Committee Spec 02, 18 May 2014
        XML Digital Signature Profile V-1.0, Committee Spec 02, 18 May 2014
        Intellectual Property Control (IPC) Profile V-1.0 OASIS Standard, 19 Jan 2015
        Export Compliance-US (EC-US) Profile V-1.0 OASIS Standard, 19 Jan 2015

    hal: thanks to martin, the xacml specs have been approved by IDESG


  Groups - xacml-3.0-time-proposal-wd-01 uploaded
    steven:  This is the first draft of a proposal for
              additional functions, data-types and attributes
              for handling time of day and day of week in distributed environments
              where the choice of time zone is variable.
     https://lists.oasis-open.org/archives/xacml/201710/msg00007.html

    steven: time in recurring time zones
            what if start and end point are start > end (can happen w time zones)

      arithmetic: is the current time in range of local time zones of subject?
       need to be able to add and sub durations from times

       define new attr: subject time zone

      datatype doesn't allow durations on dates; filled in this obvious gap

      will add use cases if people feel need to have them for clarity

      also added day of the week datatype (section 6) (1->7, Mon->Sun)

     need to decide if we want this to be in the form of a profile

      issue came up in context of cloud pdp's and relative time zones of
       resource vs physical pdp.

      ex. stock market is open in the time zone of the market

     steven: will add a resource time zone attr

     hal: great piece of work;
      can access tc-admin for template for unapproved std.
     steven: will take couple weeks for comments.


III. Issues

 Errata (comment list)
    bill: had action to update wiki from last mtg minutes

    bill: updated wiki
    hal: people should review and comment


 XACML 3.0 and deprecated identifiers
  david:
    https://lists.oasis-open.org/archives/xacml/201710/msg00004.html
  hal:
    https://lists.oasis-open.org/archives/xacml/201710/msg00005.html
  steven:
    https://lists.oasis-open.org/archives/xacml/201710/msg00006.html
  david:
    https://lists.oasis-open.org/archives/xacml/201710/msg00008.html
  steven:
    https://lists.oasis-open.org/archives/xacml/201710/msg00009.html

  hal: things are deprecated because there is a better way, not because
   no one using it.

   if there was a 3.1 or 4.0 will consider
   deprecate is warning not a set date

   will go thru list to see what issue really is.


  hal: mtg adjourned 5:05 pm
   next mtg Nov 9: 2:30 PM EST