Development of a Flexible PERMIS Authorisation Module for Shibboleth and Apache Server

摘要

This paper describes the development of a flexible Role Based Access Control (RBAC) authorisation module - the Shibboleth and Apache Authorisation Module (SAAM) which is based on the PERMIS privilege management infrastructure. It explains how the module can work with the Apache web server, with or without Shibboleth. We argue that this can effectively improve the level of trust and flexibility of access control for the Shibboleth architecture and the Apache web server, as well as provide a finer grained level of control over web resources.