| 59 | | |
| | 59 | *4/5/12 notes from Jeanne: [[BR]] |
| | 60 | Jim got code from Ted Faber. Looking through it. Looking at example code. [[BR]] |
| | 61 | ABAC is not currently implemented (at ISI?) as a service. This needs to be done. Ted thinks this should be trivial. Looks like (via papers) ORCA has implemented as a server (ORCA Pod?) with RESTful interface. [[BR]] |
| | 62 | Jim contacted Jeff Chase to get code. Making some progress, still some unknowns. [[BR]] |
| | 63 | Martin: Thinks we perhaps can use UNIS for source of constraints or reference (URL) to constraints. Use libabac to prove the chain of assertions. [[BR]] |
| | 64 | All agree that we should have a central location for rules. [[BR]] |
| | 65 | Guilherme: Don’t want the rules to be exposed. [[BR]] |
| | 66 | Is the proving done at the service or at the authenticating application? [[BR]] |
| | 67 | Task: Harry suggests drawing up a proposal for using ABAC. Jim: Jim and Martin to discuss, learn more, and come up with a proposal. [[BR]] |
