Algorithms for Maintaining Authorization Base

摘要

We present algorithms for access rights control in multiuser, object-oriented databases. These algorithms follow the model of auihorizatio7i introduced in F. Rabitti et al., A model of authorization for next-generation databases, ACM Transaction on Database Systems 16:88-131, 1991. We show how the three basic operations: AcctssControl, Grant, and Revoke can be efficiently implemented using methods for manipulating partially ordered sets. Several techniques for maintenance of authorization bases are presented and the com-plexity of the algorithms is established.