社会化Web/协作体系结构中基于二值关系的访问控制
Relational Access Control with Bivalent Permissions in a Social Web/Collaboration Architecture
摘要：
我们描述了一个访问控制模型，已实现的Web内容管理框架“Deme”（与“团队”押韵）。Deme中的访问控制就是我们所说的“二价关系对象访问控制”（BROAC）的一个例子。这个模型建立在Giunchiglia等人最近关于基于关系的访问控制（RelBAC）的工作，以及其他关于关系、灵活、细粒度和XML访问控制模型的工作的基础上。我们描述Deme的架构和审查访问控制模型，激励我们的方法。BROAC允许肯定权限和否定权限，这两种权限可能相互冲突。我们认为，在目标数据库中的对象定义访问控制规则的有用性，并为解决权限冲突的必要性，在社交网络/协作架构。在描述了Deme访问控制的工作原理之后，包括Deme中不同权限类型之间的优先关系，我们提供了几个现实场景中出现权限冲突的示例，并展示了Deme如何解决这些冲突。初始性能测试表明，权限检查在实际Deme网站上的时间呈线性增长。
英文摘要：
We describe an access control model that has been implemented in the web content management framework "Deme" (which rhymes with "team"). Access control in Deme is an example of what we call "bivalent relation object access control"(BROAC). This model builds on recent work by Giunchiglia et al. on relation-based access control (RelBAC), as well as other work on relational, flexible, fine-grained, and XML access control models. We describe Deme's architecture and review access control models, motivating our approach. BROAC allows for both positive and negative permissions, which may conflict with each other. We argue for the usefulness of defining access control rules as objects in the target database, and for the necessity of resolving permission conflicts in a social Web/collaboration architecture. After describing how Deme access control works, including the precedence relations between different permission types in Deme, we provide several examples of realistic scenarios in which permission conflicts arise, and show how Deme resolves them. Initial performance tests indicate that permission checking scales linearly in time on a practical Deme website.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
