A Formal Access Control Model for XML Databases

摘要

In this paper, we first define a logical theory representing an XML database supporting xpath as query language and xupdate as modification language. We then extend our theory with predicates allowing us to specify the security policy protecting the database. The security policy includes rules addressing the read and write privileges. We propose axioms to derive the database view each user is permitted to see. We also propose axioms to derive the new database content after an update.