The ARBAC97 model for role-based administration of roles
- 1 February 1999
- journal article
- Published by Association for Computing Machinery (ACM) in ACM Transactions on Information and System Security
- Vol. 2 (1) , 105-135
- https://doi.org/10.1145/300830.300839
Abstract
In role-based access control (RBAC), permissions are associated with roles' and users are made members of roles, thereby acquiring the roles; permissions. RBAC's motivation is to simplify administration of authorizations. An appealing possibility is to use RBAC itself to manage RBAC, to further provide administrative convenience and scalability, especially in decentralizing administrative authority, responsibility, and chores. This paper describes the motivation, intuition, and formal definition of a new role-based model for RBAC administration. This model is called ARBAC97 (administrative RBAC '97) and has three components: URA97 (user-role assignment '97), RPA97 (permission-role assignment '97), and RRA97 (role-role assignment '97) dealing with different aspects of RBAC administration. URA97, PRA97, and an outline of RRA97 were defined in 1997, hence the designation given to the entire model. RRA97 was completed in 1998. ARBAC97 is described completely in this paper for the first time. We also discusses possible extensions of ARBAC97.Keywords
This publication has 9 references indexed in Scilit:
- The NIST model for role-based access controlPublished by Association for Computing Machinery (ACM) ,2000
- Role-based administration of user-role assignment: The URA97 model and its Oracle implementationJournal of Computer Security, 1999
- The specification and enforcement of authorization constraints in workflow management systemsACM Transactions on Information and System Security, 1999
- The role graph model and conflict of interestACM Transactions on Information and System Security, 1999
- A role-based access control model and reference implementation within a corporate intranetACM Transactions on Information and System Security, 1999
- An Oracle implementation of the PRA97 model for permission-role assignmentPublished by Association for Computing Machinery (ACM) ,1998
- An extended authorization model for relational databasesIEEE Transactions on Knowledge and Data Engineering, 1997
- Role-based access control modelsComputer, 1996
- Protection in operating systemsCommunications of the ACM, 1976