User authorisation is traditionally coordinated by system administrators processing delegation requests. This overhead influences an enterprise's ability to respond efficiently and contributes to the total cost of ownership. We propose to reduce this bottleneck by supporting Dynamic Administrative Coalitions of ordinary users that hold administrative powers reflecting their authority. These coa...

Formal foundations for access control policies with both authority delegation and policy composition operators are partial and limited. Correctness guarantees cannot therefore be formally stated and verified for decentralized composite access control systems, such as those based on XACML 3. To address this problem we develop a formal policy language BelLog that can express both delegation and c...

This paper studies the effects of open disagreement on motivation and coordination. It shows how – in the presence of differing priors – motivation and coordination impose conflicting demands on the allocation of authority, leading to a trade-off between the two. The paper first derives a new mechanism for delegation: since the agent thinks – by revealed preference applied to differing priors –...

Obligation policies are one main means of exercising control within an organisation. They specify the actions that some subject has to perform. The authority over these actions needs to be specified in authorisation policies. Current policy notations provide us with the needed structure to represent authorisations and obligations as policy objects for distributed systems management. They suppor...

• Delegation of innovation decisions depends on firms’ strategies Under closed innovation, delegation relates negatively to firm's R&D intensity open knowledge nature shapes intensity-delegation relation When firms absorb scientific knowledge, this negative association turns positive practical is stronger We study what determines authority over in firms. Extant research that addresses topic an ...

In this paper we investigate the design space of access control logics. Specifically, we consider several possible axioms for the common operator says. Some of the axioms come from modal logic and programming-language theory; others are suggested by ideas from security, such as delegation of authority and the Principle of Least Privilege. We compare these axioms and study their implications.

As part of the Domino project on distributed system management, a model of 'Delegation of Authority' was created. A formal description method was used as the basis of the model in order to achieve precision and generality. Z was chosen for this purpose, supplemented by Prolog to animate the specification so that it could be validated with examples. It was found that other representation methods...

This paper presents an experience-based account of the concept of authority in the context of recent and anticipatory developments in the air traffic management (ATM) domain where airspace capacity constantly increases and international programs plan on developing more technology to increase ATM safety. In this context, traditional individual human factors investigations shift toward new organi...

Delegation is a pervasive phenomenon in firms, procurement contracting, financial and regulatory institutions. Owners frequently delegate management of the firm to top level managers, who in turn delegate management of divisions to middle level managers. In procurement contracting, the purchaser often contracts with a single ‘prime’ contractor, delegating the responsibility of subcontracting wi...