Role-based authorization constraints specification

By Gail-Joon Ahn, R. Sandhu. ACM Transactions on Privacy and Security, 2000

469 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Extending query rewriting techniques for fine-grained access control (2004, background): “, [11, 2]) do not have any inherent support for fine-grained authorization, and thus do not directly address the problem we have tackled.”
Model driven security: From UML models to access control infrastructures (2006, methodology): “Ahn and Sandhu [1999] develop the RSL99 language for Role-Based Separation of Duty Constraints and the Role-Based Constraint Language RCL2000 [Ahn and Sandhu 2000].”
Data Security and Privacy-Preserving in Edge Computing Paradigm: Survey and Open Issues (2018, background): “access control and privilege management by users-to-roles and roles-to-objects authority mapping mechanism which means the RBAC can regulate the access of users to resources and applications based on identifying roles and activities of users in the system [141], [142].”
Access control in collaborative systems (2005, methodology): “RBAC models have been successfully implemented in workflow systems [Bertino et al. 1999; Kang et al. 2001; Ahn et al. 2000; Park et al. 2001] and distributed environments [Ferraiolo and Barkley 1997; Ferraiolo et al.”
Database security - concepts, approaches, and challenges (2005, background): “allowing one to represent role-subrole relationships, thus enabling authorization inheritance and separation of duty (SoD) constraints [5], [67].”