Towards access control for logical document structures

F. Dridi, G. Neumann
Proceedings Ninth International Workshop on Database and Expert Systems Applications (Cat. No.98EX130)  
This paper presents a first step towards a security model that defines access control for logical document structures. This model benefits from roles to abstract from users and from security levels (classifications) that abstract from objects. The security levels are defined on top of a complex document structure which will be needed for real web applications. Since a user clearance for an operation can be designated from roles and permissions, we use a lattice that defines a partial order over
more » ... partial order over classifications to make an authorisation decision. Ordinary users should be able to handle the right management of their documents. The proposed model can be used in a decentral way.
doi:10.1109/dexa.1998.707420 dblp:conf/dexaw/DridiN98 fatcat:2okrnnzw3vfhbjh4kfjbp5qwuu