TRANSLATING ROLE-BASED ACCESS CONTROL POLICY TO RESOURCE AUTHORIZATION POLICY.

摘要

Translation of role-based authoring models for managing RBAC "roles"to resource authorization policy (RAP), such as ACL-based applications, isprovided. A generic RBAC system is defined from which mappings to other authorizationenforcement mechanism make possible the translation of RBAC "roles"to resource authorization policies applied to resources managed by a resourcemanager, e.g., a file system resource manager. An implementation is describedthat uses Windows Authorization Manager as a storage mechanism and object modelto manage object types and relationships translated from an RBAC system.