DMCA
XACML and role-based access control (2005)
| Venue: | Presentation at DIMACS Workshop on Security of Web Services and e-Commerce |
| Citations: | 48 - 6 self |
BibTeX
@INPROCEEDINGS{Crampton05xacmland,
author = {Jason Crampton and Hemanth Khambhammettu},
title = {XACML and role-based access control},
booktitle = {Presentation at DIMACS Workshop on Security of Web Services and e-Commerce},
year = {2005},
pages = {174},
publisher = {Springer}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Abstract. User delegation is a mechanism for assigning access rights available to a user to another user. A delegation operation can either be a grant or transfer operation. Delegation for role-based access control models have extensively studied grant delegations. However, transfer delegations for role-based access control have largely been ignored. This is largely because enforcing transfer delegation policies is more complex than grant delegation policies. This paper, primarily, studies transfer delegations for role-based access control models. We also include grant delegations in our model for completeness. We present various mechanisms that authorise delegations in our model. In particular, we show that the use of administrative scope for authorising delegations is more efficient than using relations. We also discuss the enforcement and revocation of delegations. Finally, we compare our work with relevant work in the literature. 1
