Tackling Access Control Complexity by Combining XACML and Domain Driven Design

摘要

In the paper we propose an approach for designing software architecture with the access control solution which reflects the real business needs in a consistent, maintainable and complete way. We identify and analyze key drivers and requirements for access control, show the complexity of authorizations and propose an approach based on XACML and Domain Driven Design.