FORMAL DECISION MODELING FOR ROLE-BASED ACCESS CONTROL POLICIES

Role-Based Access Control (RBAC) has been widely used in information systems, including so-called critical systems. In business, workflows are to control the flow of processes. One major issues concerning these processes is be able verify that a proposed process model strictly corresponds specifications which it supposed respond. models describe frameworks dictate permissions. The RBAC generally static, i.e. access decisions are: grant or deny. Dynamic and flexible required. order increase flexibility control, notion decision proposed. Decisions execute requirements fulfilled. main this article use produce dynamic model. Our augments dynamics It allows dynamically assigning For illustration, Feather's meeting management system used. Finally, first-order logic analyze validity