Re: [COAS-List] minutes from COAS meeting on January 14

[Konstantin Beznosov <beznosov@baptisthealth.net>]

I think both ways are possible and the spec should not mandate either of
them, it should leave it as implementation detail. Some COAS
implementations would just call HRAC again, and some, that want to
shortcut, would shortcut. There are consequences in either case.

Konstantin

Charles Carman wrote:
> 
> Hi Konstantin,
> 
> My recollection is that we thought it would be best for the HRAC to query
> the COAS for the additional information it needs to make its decisions.
> This raises the ugly question, "what does the COAS do about access control
> when the HRAC is the requester?"  Should it call the HRAC again for the
> data requested by the HRAC, or should it notice that the HRAC is the
> requestor and just send it the data if it is available?
> 
> Chuck
> 
> At 08:06 AM 2/18/99 -0600, you wrote:
> >Hi Charles,
> >
> >Thanks much.
> >
> >I also remember that we talked about QualifiedPersonID of the subject
> >who made the observation in case such information is available for the
> >observation in question. It was pointed out that availability of such
> >information is not always the case. Did we decide that if such
> >information is needed by HRAC it should query COAS server or we decided
> >that this information might be provided as an optional part of COAS
> >resource name?
> >
> >Konstantin
> >
> >Charles Carman wrote:
> >>
> >> Hi Konstantin,
> >>
> >> I believe David Foard was taking notes.  I happen to have the flip charts,
> >> which included our "decisions" about how COAS will use HRAC.
> >>
> >> COAS will include the following data with any access reqest to HRAC:
> >>         observedSubject - a QualifiedPersonID
> >>         observationType - a QualifiedCode
> >>         observationTime - a TimeSpan
> >> COAS may optionally include an OID - a QualifiedObservationID
> >>
> >> A COAS does NOT have to use an HRAC, but it may if one is available.
> >>
> >> I hope this answers your questions.
> >>
> >> Chuck Carman
> >>
> >> At 10:01 PM 2/17/99 -0600, you wrote:
> >> >Hi there
> >> >
> >> >Are there any minutes available from the Arlington meeting of COAS
> >> >submission team on Thursday (1/14)?
> >> >
> >> >If there are, then can somebody forward them to me? I would like to look
> >> >up exactly what was decided about use of HRAC by COAS.
> >> >
> >> >Thanks
> >> >Konstantin
> >> >
> >> >
> >
> >