Managing the Life Cycle of Access Rules in CEOSIS

9 years 6 months ago
Managing the Life Cycle of Access Rules in CEOSIS
The definition and management of access rules (e.g., to control the access to business documents and business functions) is an important task within any enterprise information systems (EIS). Many EIS apply role-based access control (RBAC) mechanisms to specify access rules based on organizational models. However, only little research has been spent on organizational changes even though they often become necessary in practice. Examples comprise the evolution of organizational models with subsequent adaptation of access rules or direct access rule modifications. In this paper, we present a change framework for the controlled evolution of access rules in EIS. Specifically, we define change operations which ensure correct modification of access rules. Finally, we define the formal semantics of access rule changes based on operator trees which enables their unambiguous application; i.e., we can precisely determine which effects are caused by respective adaptations. This is important,...
Stefanie Rinderle-Ma, Manfred Reichert
Added 29 May 2010
Updated 29 May 2010
Type Conference
Year 2008
Where EDOC
Authors Stefanie Rinderle-Ma, Manfred Reichert
Comments (0)