UML-Based Representation of Role-Based Access Control

In role-based access control (RBAC) permissions are associated with roles, and users are made members of appropriate roles thereby acquiring the roles' permissions. The principal motivation behind RBAC is to simplify administration. Several frameworks for the development of role-based systems have been introduced. There are, however, a few works specifying RBAC in a way which system developers or software engineers can easily understand and refer to develop role-based systems. The Uni ed Modeling Language (UML) is a general-purpose visual modeling language that is used to specify, visualize, and document the components of a software system. In this paper we represent the RBAC model with this well-known modeling language to reduce a gap between security model and system development. We also specify the RBAC model with three views: static view, functional view, and dynamic view. We also brie y discuss about the future directions.