Action Fedora XACML Evaluation

Assigned

BAM+KFC

Prev assigned

Tasks adressed

["TaskA"], ["TaskA.5"], ["TaskD.7"]

Time estimated

4md

Time used

3md

Priority

1

Status

In progress

Iteration

10

Notes

Evaluate if the Fedora XACML authorization system is sufficient for DOMS

Description

To evaluate the Fedora XACML authentication system in relation to DOMS, we need to

1. find and read available material,

   • [http://www.fedora-commons.org/documentation/3.0b1/userdocs/server/security/AuthorizationXACML.htm Fedora Authorization with XACML Policy Enforcement]

   • [http://www.fedora-commons.org/documentation/3.0b1/userdocs/server/security/XACMLPolicyGuide.htm Fedora XACML Policy Writing Guide]

   • [http://www.fedora-commons.org/documentation/3.0b1/userdocs/server/security/securingrepo.html Securing Your Fedora Repository]

   • [http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml OASIS eXtensible Access Control Markup Language (XACML) TC]

2. do a small-scale test,
   • testing has been postponed to a later action
3. decide whether to recommend XACML as an option for DOMS and
   • the decision is to recommend Fedora authorization with XACML Policy Enforcement though with reservations
     1. we still need a test of the Fedora XACML authorization system
     2. and we still need an analysis of the DOMS authorization requirements to determine whether these can be met by Fedora XACML authorization
4. write a brief summary to document the decision:
   • ["FedoraXACML_Evaluation_Summary"]

If we decide that XACML is an option, we will need a large-scale test, but this will be a new action.

Progress

• Wrote description + suggested priority and time estimate. Will ask KFC for quick review. -- ["bam"] DateTime(2008-06-04T08:13:29Z)

• Updated list of tasks addressed, replaced link to XACML framework to the documentation for Fedora 3.0 beta. -- ["kfc"] DateTime(2008-06-04T13:20:00Z)

• Updated description, decision + summary. -- ["bam"] DateTime(2008-06-19T07:07:16Z)

• Closed action. -- ["bam"] DateTime(2008-09-25T07:02:04Z)

Checklist For Working On An Action

Please make sure that you address the below issues, when working on an action:

• Update the state of the action to "In Progress" when you start working on it.
• Check if the tasks addressed by this action have their status set to "In Progress". If that is not the case, then change the state of them.

• Keep track of how much time that has been spent working on the action. If it addresses more than one task, then make a note on the action page about how much of the elapsed time that has been spent on the individual tasks. Hint: Continually updating the "Time used" field will make it easier for you.

• Update the "Progress History" and documentation pages of each task addressed by this action when appropriate. This depends on the situation, but in general, the task pages should hold all important related information about the work done, experiences gathered, identified requirements and so on.
• When finishing the action, change the status to "Finished" and update the "time used" field on the action page.