Towards a More Complete Model of Role

Goh, Cheh ; Baldwin, Adrian

HP Development Company

关键词: role-based;    access control;    RBAC;    management;    constraint-based;    subsidiarity;   

RP-ID  :  HPL-98-92

学科分类：计算机科学（综合）

美国|英语

来源: HP Labs

【 摘 要 】

In order to manage the use of roles for the purpose of access control, it is important to look at attributes beyond the consideration of capability assignment. Fundamentally, a generic attribute description using a constraint-based approach will allow many of the important aspects of role, such as scope, activation and deactivation, to be included. Furthermore, the commonly accepted concept of role hierarchy is challenged from the point of view of subsidiarity in real organisations, with the suggestion that role hierarchy has limited usefulness that does not seem to apply widely. 8 Pages