Access control policy based on XACML
Heqing Guo · Jisuanji gongcheng yu sheji · 2006
How to solve access control on Web services has become one of the important research tasks about the application of Web ser-vices.Firstly,the motivation of XACML's emergency is introduced,and how to define normal access control policy combined with Xpath is explained.General access control using XACML policies is defined,and a mechanism is presented to detect and resolve the conflicts among the policies,which make a 'fine-grained' access control on Web services.Finally,how to build access control policy using XACML and how to control entities' access are described in detail.