Toward a Multi-Tenancy Authorization System for Cloud Services
José M. Alcaraz Calero, Nigel Edwards, Johannes Kirschnick, Lawrence Wilcock, Mike Wray · IEEE Security & Privacy · 2010
This article describes an authorization model suitable for cloud computing that supports hierarchical rolebased access control, path-based object hierarchies, and federation. The authors also present an authorization system architecture for implementing the model.