Evaluating the effects of access control policies within NoSQL systems

Abstract Access control is a key service of any data management system. It allows regulating the access to resources at different granularity levels on basis models which vary protection options they offer. The more powerful model in terms requirements, difficult for security administrators understand effect set policies protected resources. This further complicated within schemaless systems, like NoSQL datastores, when fine grained are specified characterized by heterogeneous structures. lack reference and related manipulation languages exacerbates this issue. To best our knowledge, general approach evaluate impact systems still missing. In paper, we start fill void, proposing agnostic approach, which, starting from datasets discretionary models, derives view that points out authorized unauthorized contents. Experimental results show efficiency even with large datasets.