List of pending issues (backlog)?

Hello all,

I have (re)joined the XACML TC recently, and as I have a few issues to add to the TC’s “backlog” for later discussion, I am looking for a place in the TC workspace where you keep track of pending issues. Is there such a place?

I’ve seen the “Wishlist” page on the wiki but seems quite old.

To give an idea, some issues of interest to me:

1) Changes to XACML core spec:

a. Backward-compatible / non-breaking changes:

i. Add <VariableRefence> as third choice in Target <Match> (in addition to AttributeDesignator, AttributeSelector)

ii. Add <VariableDefinition>s as optional elements in <PolicySet> and <Rule> (like in <Policy>)

iii. Support JsonPath evaluation in <AttributeDesignator>, by adding optional attribute ‘contentType’ (for example) = ‘JSON’ or ‘XML’ (‘XML’ is the default value), to indicate whether the <Content> must be processed as ‘JSON’ object instead of XML, and the ‘Path’ handled as JsonPath according to this draft RFC: https://datatracker.ietf.org/doc/draft-ietf-jsonpath-base/. For this one, it may be safer to wait it become an IETF standard. But it’s good to anticipate.

b. Breaking/non-backward-compatible changes to XACML core spec, therefore to be considered rather for XACML 4.0:

i. XSD simplification: replace Obligation/Advice(_expression_) elements with one PepAction(_expression_) element and a XML attribute required=’true’ (for Obligation) or ‘false’ (for Advice)

2) New profiles:

a. YAML Profile of XACML: for writing XACML policies in YAML.

Kind regards,

Cyril

From: xacml@lists.oasis-open.org <xacml@lists.oasis-open.org> On Behalf Of William Parducci
Sent: mercredi 19 juillet 2023 00:54
To: XACML TC <xacml@lists.oasis-open.org>
Subject: [xacml] Proposed Agenda 19 July, 2023 TC Meeting

Time: 4:30 PM EDT (UTC-4)

Tel: 1-267-807-9601
Access Code: 620-103-760

Proposed agenda 25 May 2023 TC meeting

I. Roll Call & Minutes
Approve Minutes 25 May 2023 TC Meeting
https://lists.oasis-open.org/archives/xacml/202305/msg00005.html

II. Administrivia

Home Page clean-up

https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml

OASIS event announcements

https://lists.oasis-open.org/archives/xacml/202307/msg00000.html

III. Issues
Separation of Duties

xacml message