Inheritance Properties of Role Hierarchies
نویسنده
چکیده
Role Based Access Control (RBAC) refers to a class of security mechanisms that mediate access to resources through organizational identities called roles. A number of models have been published [1, 2 ,3] that formally describe the basic properties of RBAC. One feature of these models is the notion of a role hierarchy, which represents the relationship among roles that are defined in terms of other roles and inherit basic capabilities from them. This paper explores some interesting characteristics of role hierarchies and how they affect basic RBAC properties such as separation of duty.
منابع مشابه
Evaluating and Optimizing Factorization in Inheritance Hierarchies
Inheritance hierarchies often constitute the backbone of object-oriented systems. Their quality is therefore quite crucial. We present here our work the objective of which is to help designers to improve and to measure the quality of their inheritance hierarchies. The quality we deal with is the degree of factorization of information. Our work is based on the mathematical structure of Galois (c...
متن کاملMetonymic and Holonymic Roles and Emergent Properties in the SNOMED CT Ontology
This paper discusses the manner in which SNOMED CT (SCT) has confused the metonymic role of some class labels as holonyms and has inappropriately assigned property inheritance down a holonymic chain due to its transitiveness. The notion of emergent properties is introduced as the only form of property that can exist on a holonym and its use in a hypernymic inheritance hierarchy is discussed. Th...
متن کاملBlock Decomposition of Inheritance Hierarchies
Inheritance hierarchies play a central role in object oriented languages as in knowledge representation systems. These hierarchies are acyclic directed graphs representing the underline structure of objects. This paper is devoted to the study of eecient algorithms to decompose recursively an inheritance hierarchy into independent subgraphs which are inheritance hierarchies themselves. This proc...
متن کاملEfficient approach for restructuring multiple inheritance hierarchies
This paper discusses the restructuring of inheritance hierarchies of classes and introduces a method of restructuring multiple hierarchies of class inheritance, which removes duplicated methods and creates inheritance hierarchies without overridden methods while preserving the behavior of objects. This paper formulates a restructuring problem for 0–1 integer programming and presents a network-b...
متن کاملPrime Numbers Considered Useful: Ontology Encoding for Efficient Subsumption Testing
Multiple inheritance hierarchies are frequently used for the classification of concepts into a taxonomy, to model software by organizing classes into an inheritance hierarchy, for querying object-oriented databases, for knowledge representation, policy enforcement, and subtyping of service interfaces for safe composition and substitution. All these areas apply hierarchies and share the same con...
متن کامل