Establishing Role-based Access Control in Viewpoint-oriented Variability Management

Process roles are used to structure complex engineering processes in single systems development for many years. Typically, each role has specific responsibilities from which certain information demands originate. In the engineering of variable software, role-specific information demands affect variability information. To control the access to the variability information, we suggest using the concepts of an explicit access control model. We integrate an access control model and a variability modeling language on a conceptual level. Additionally, we extend the variability modeling language by formally defined operations. Based on this extension, we propose a formal integration of an access control model and the variability modeling language. Our solution allows to explicitly define access control to variability information on a formal basis.