| 1 | == Authorization == |
| 2 | |
| 3 | Wed, 1500-1630 |
| 4 | |
| 5 | Organizers: Steve Schwab and Ted Faber, USC/ISI |
| 6 | |
| 7 | GENI aggregates currently use signed XML credentials to make |
| 8 | authorization decisions. At GEC10 we began a one year effort to |
| 9 | evaluate ABAC assertions as a more flexible basis for GENI |
| 10 | authorization. This meeting will seek agreement on a vocabulary for |
| 11 | ABAC assertions and policies, and then surface outstanding issues |
| 12 | and concerns or other work that must be addressed before the |
| 13 | community can decide whether to adopt ABAC. We will also review the |
| 14 | status of integrating ABAC in existing control frameworks and |
| 15 | aggregates. |