A Transitive Access Control Model for Dynamic Roles and Attributes

Abstract

Role-based access control (RBAC) has gained popularity for the expression of access constraints in information systems but existing RBAC models do not provide sufficient expressive power to support the kinds of fine-grained access control often required. In this paper, we define a new formal model for RBAC which supports controlled role appointment and transitions, object attributes analogous to subject roles and a transitive role/attribute derivation relationship.