Research on meta-model to realize fine-grained access control
Luo Pin · Dalian Ligong Daxue xuebao · 2012
Aiming at users′ demanding for fine-grained access control to protected information resources,the term ″permission″ in OB4LAC is expanded to be more finely granular in the way of meta-model.Attributes of information resources,such as time period,security constraints and context situation,are taken into account to establish fine-grained meta-model of data object and operation object,of which merging rules are researched so that the set of function permissions and function menus can be fine-grained.As such,roles can be wisely identified and classified accordingly,which is helpful for managing roles and achieving goals of fine-grained access control,as well as providing methods for establishing optimal access control policy.