Deriving Effective Permissions for Modeling Artifacts from Fine-grained Access Control Rules

摘要

In case of collaborative modeling, complex systems are de-udveloped by different stakeholders. To guarantee security,udaccess control policies need to be enforced during the col-udlaboration. Levels of required confidentiality and integrityudmay vary across modeling artifacts, and even features of audsingle model element.udFine-grained rule-based access control was proposed toudmeet the needs of flexible and concise access control. Rule-udbased policies are inherently subject to conflicts betweenudthe rules; these conflicts should be interpreted in a consis-udtent but also predictable way that caters to the preferencesudof the policy engineer.udWe propose a deterministic, parameterizable resolutionudstrategy between conflicting rules to calculate effective ac-udcess permissions for each fact in the model. Our approach isudillustrated using a case study of the MONDO EU project