Report Examines Access Control, Privacy Issues

W3C has published a report and full minutes of the Workshop on Access Control Application Scenarios, held in Luxembourg in November 2009. Participants from 17 organizations examined the current limitations of access control, privacy enhancement, distributed handling of access control, and other challenging use cases. eXtensible Access Control Markup Language (XACML) was a focus of the Workshop, though not the exclusive topic of conversation. The report summarizes the major "takeaways" from the Workshop, related to XACML semantics, "sticky" policies, and credentials-based access control. The OASIS XACML Technical Committee is expected to take up these topics. W3C's Policy Languages Interest Group (PLING) is expected to discuss data handling policies and the matching and triggering of events in the privacy context.