FHIR Chat · SMART IG status · Security and Privacy

Hi Security! @John Moehrke: in FHIR-I we're just reviewing project statuses and moving SMART to "Active" given this year's in Argonaut (granular scopes, token introspection, etc). I believe Security is a co-sponsor, so wanted to give a heads-up here and make sure this looks OK.

John Moehrke (Oct 06 2020 at 12:22):

so this marking of Active is based on the argonaut discussions? I have not seen any of those discussions happen in the Security WG context. I think I would like to see this active, taking place within the security wg.

John Moehrke (Oct 06 2020 at 12:25):

I think the argonaut discussions have clearly indicated there is a need to start work on the next revision of SMART. I suspect that set of people would be the main contributor, but process wise they are not a sub-committee of the security wg.

Josh Mandel (Oct 06 2020 at 15:45):

Thanks @John Moehrke -- it's been great having your participation in our Argonaut calls -- which (for the record, for others following along) are advertised publicly at http://www.hl7.org/concalls/Default.aspx and announced here on Zulip at #smart > Argonaut Announcements.

The SMART App Launch Framework is owned by FHIR-I and co-sponsored by security.

Coming back to the issue at hand: is the Security WG happy to mark the SMART App Launch project as "active", given the assessment above?

(And process-wise you suggesting that the meetings would need to take place during Security WG conference calls instead of FHIR Infrastructure?)

John Moehrke (Oct 06 2020 at 15:55):

I am fine with FHIR-I owning and security co... I didn't see these on the FHIR-I distribution

John Moehrke (Oct 06 2020 at 16:00):

It is odd that FHIR-I would be hosting an "Argonaut" call. Is this argonaut or is it FHIR-I? I think this needs to be made more clear.

John Moehrke (Oct 06 2020 at 16:01):

What is the PSS number so that I can check the security WG approval status. I have not been able to make all security calls, and was not at the WGM.

Josh Mandel (Oct 06 2020 at 21:09):

Background: since ~April we've met in twice-monthly discussions convened by Argonaut. During these calls we identify issues, informally assess perspectives, and do our best to agree on specific language to add clarifications or enhance the functionality of the IG. Once we've covered what seems like a coherent set of enhancements, the plan is to formally bring these together (as a coherent set) for review in FHIR-I. Of course before we propose to ballot these materials (targeting May 2021), we'll need to ensure that the sponsor + co-sponsor are on board with taking this content forward.

https://www.hl7.org/special/Committees/projman/searchableProjectIndex.cfm?action=edit&ProjectNumber=1341 captures project summary details from HL7.

John Moehrke (Oct 07 2020 at 12:35):

okay, so then it is not "active" until the PSS is brought to FHIR-I and Security... governance fact.

Josh Mandel (Oct 07 2020 at 13:09):

Right -- hence this thread, where I'm asking if Security will okay this status change. Is this something you can add to an upcoming call agenda? I'd be happy to join if there are questions.