30-Day Committee Specification Draft Public Review Request for XACML v3.0 Related and Nested Entities Profile Version 1.0

Submitted on Thursday, July 16, 2015 - 14:46
Submitted by user:
Submitted values are:

Submitter's Name: Hal Lockhart
TC Name: XACML TC
TC Email Address: xacml@lists.oasis-open.org
Work Product Title: XACML v3.0 Related and Nested Entities Profile Version
1.0
Committee Specification Draft ##: CSD 01
CSD URI: TBD
Additional Resources :
Approval Link:
https://www.oasis-open.org/apps/org/workgroup/xacml/email/archives/201507/msg00003.html
Abstract:
The eXtensible Access Control Markup Language (XACML) [XACML3] defines
categories of attributes that describe entities of relevance to access
control
decisions. XACML rules, policies and policy sets contain assertions over the
attributes of these entities that must be evaluated to arrive at an access
decision. Principal among the various predefined entities are the entity that
is
requesting access, i.e., the access subject, and the entity being accessed,
i.e., the resource. However, it is not unusual for access decisions to be
dependent on attributes of entities that are associated with the access
subject
or resource. For example, attributes of an organization that employs the
access
subject, or attributes of a licensing agreement that covers the terms of use
of
a resource.

This profile defines two ways of representing these associated entities in
the
request context - related entities and nested entities - and defines
additional
mechanisms to access and traverse these entities.

TC Description: The XACML TC specifies access control standards, based on the
Attribute-based Access Control model (ABAC). The core of this work is the
specification of the syntax and semantics of a policy language called XACML.
Current work in the TC consists mostly of defining additional profiles of
various types which build on version 3.0 of the XACML core specification.
Notification List:
Notes: Request for CSD was submitted just prior to this request.

The results of this submission may be viewed at:
http://tools.oasis-open.org/issues/browse/TCADMIN