Access Control of XML Documents in Relational Database Systems.
Kian‐Lee Tan, Mong Li Lee, Yue Wang · 2001
In this paper, we present the design and implementation of an access control system for XML documents. Our system stores XML documents as relational tables in a relational database management system, and operates in three phases. In phase 1, the authorization rules are preprocessed to determine the information that should be protected. In phase 2, only the necessary information are retrieved from the database, i.e., the protected information are not accessed. Finally, in phase 3, the retrieved data are verified against the (remaining) authorization rules to filter away those that cannot be disclosed.