The URA 97 Model for Role - Based User - Role
نویسندگان
چکیده
In role-based access control (RBAC) permissions are associated with roles, and users are made members of appropriate roles thereby acquiring the roles' permissions. The principal motivation behind RBAC is to simplify administration. An appealing possibility is to use RBAC itself to manage RBAC, to further provide administrative convenience. In this paper we introduce a role-based administrative model, called URA97 (user-role assignment '97), for assignment of users to roles.
منابع مشابه
Attribute Based Administration of Role Based Access Control : A Detail Description
Administrative Role Based Access Control (ARBAC) models deal with how to manage user-role assignments (URA), permission-role assignments (PRA), and rolerole assignments (RRA). A wide-variety of approaches have been proposed in the literature for URA, PRA and RRA. In this paper, we propose attribute-based administrative models that unify many prior approaches for URA and PRA. The motivating fact...
متن کاملA Model for Attribute Based Role-Role Assignment (ARRA)
Administrative Role Based Access Control (ARBAC) models specify how to manage user-role assignments (URA), permission-role assignments (PRA), and role-role assignments (RRA). Many approaches have been proposed in the literature for URA, PRA and RRA. In this paper, we propose a model for attribute-based rolerole assignment (ARRA), a novel way to unify prior RRA approaches. We leverage the idea t...
متن کاملThe ARBAC99 Model for Administration of Roles
Role-Based Access Control (RBAC) is a exible and policy-neutral access control technology. For large systems|with hundreds of roles, thousands of users and millions of permissions|managing roles, users, permissions and their interrelationships is a formidable task that cannot realistically be centralized in a small team of security administrators. An appealing possibility is to use RBAC itself ...
متن کاملRole-based Administration of User-role Assignment and Its Oracle Implementation
In role-based access control (RBAC) permissions are associated with roles, and users are made members of appropriate roles thereby acquiring the roles’ permissions. The principal motivation behind RBAC is to simplify administration. An appealing possibility is to use RBAC itself to manage RBAC, to further provide administrative convenience. In this paper we investigate one aspect of RBAC admini...
متن کاملEnforcing RBAC Policies over Data Stored on Untrusted Server (Extended Version)
One of the security issues in data outsourcing is the enforcement of the data owner’s access control policies. This includes some challenges. The first challenge is preserving confidentiality of data and policies. One of the existing solutions is encrypting data before outsourcing which brings new challenges; namely, the number of keys required to access authorized resources, efficient policy u...
متن کامل