A fine-grained, controllable, user-to-user delegation method in RBAC

Jacques Wainer; Akhil Kumar

doi:10.1145/1063979.1063991

A fine-grained, controllable, user-to-user delegation method in RBAC

Jacques Wainer
, Akhil Kumar

Supply Chain and Information Systems

Research output: Contribution to conference › Paper › peer-review

74 Scopus citations

Abstract

This paper addresses the issues surrounding user-to-user delegation in RBAC. We show how delegations can be incorporated into the RBAC model in a simple and straightforward manner. A special feature of the model is that it allows fine-grained control over what rights a user wishes to delegate as opposed to delegation at the role level where all the rights of a role must be delegated. In addition, the model provides a rich set of controls regarding further delegations of a right, generic constraints that further control delegations, and an innovative model for revocations. Properties of both delegation and revocation are discussed, and our work is compared with other related research.

Original language	English (US)
Pages	59-66
Number of pages	8
DOIs	https://doi.org/10.1145/1063979.1063991
State	Published - 2005
Event	SACMAT 2005: Proceedings of 10th ACM Symposium on Access Control Models and Technologies - Stockholm, Sweden Duration: Jun 1 2005 → Jun 3 2005

Other

Other	SACMAT 2005: Proceedings of 10th ACM Symposium on Access Control Models and Technologies
Country/Territory	Sweden
City	Stockholm
Period	6/1/05 → 6/3/05

All Science Journal Classification (ASJC) codes

General Computer Science

Access to Document

10.1145/1063979.1063991

Cite this

@conference{88f2773a0df74684a9e9d5d452e439ed,

title = "A fine-grained, controllable, user-to-user delegation method in RBAC",

abstract = "This paper addresses the issues surrounding user-to-user delegation in RBAC. We show how delegations can be incorporated into the RBAC model in a simple and straightforward manner. A special feature of the model is that it allows fine-grained control over what rights a user wishes to delegate as opposed to delegation at the role level where all the rights of a role must be delegated. In addition, the model provides a rich set of controls regarding further delegations of a right, generic constraints that further control delegations, and an innovative model for revocations. Properties of both delegation and revocation are discussed, and our work is compared with other related research.",

author = "Jacques Wainer and Akhil Kumar",

year = "2005",

doi = "10.1145/1063979.1063991",

language = "English (US)",

pages = "59--66",

note = "SACMAT 2005: Proceedings of 10th ACM Symposium on Access Control Models and Technologies ; Conference date: 01-06-2005 Through 03-06-2005",

}

TY - CONF

T1 - A fine-grained, controllable, user-to-user delegation method in RBAC

AU - Wainer, Jacques

AU - Kumar, Akhil

PY - 2005

Y1 - 2005

N2 - This paper addresses the issues surrounding user-to-user delegation in RBAC. We show how delegations can be incorporated into the RBAC model in a simple and straightforward manner. A special feature of the model is that it allows fine-grained control over what rights a user wishes to delegate as opposed to delegation at the role level where all the rights of a role must be delegated. In addition, the model provides a rich set of controls regarding further delegations of a right, generic constraints that further control delegations, and an innovative model for revocations. Properties of both delegation and revocation are discussed, and our work is compared with other related research.

AB - This paper addresses the issues surrounding user-to-user delegation in RBAC. We show how delegations can be incorporated into the RBAC model in a simple and straightforward manner. A special feature of the model is that it allows fine-grained control over what rights a user wishes to delegate as opposed to delegation at the role level where all the rights of a role must be delegated. In addition, the model provides a rich set of controls regarding further delegations of a right, generic constraints that further control delegations, and an innovative model for revocations. Properties of both delegation and revocation are discussed, and our work is compared with other related research.

UR - https://www.scopus.com/pages/publications/30644480988

UR - https://www.scopus.com/pages/publications/30644480988#tab=citedBy

U2 - 10.1145/1063979.1063991

DO - 10.1145/1063979.1063991

M3 - Paper

AN - SCOPUS:30644480988

SP - 59

EP - 66

T2 - SACMAT 2005: Proceedings of 10th ACM Symposium on Access Control Models and Technologies

Y2 - 1 June 2005 through 3 June 2005

ER -

A fine-grained, controllable, user-to-user delegation method in RBAC

Abstract

Other

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this