Role-based administration of user-role assignment: The URA97 model and its Oracle implementation

Authors:
Ravi Sandhu;Venkata Bhamidipati
Affiliations:
Laboratory for Information Security Technology, ISSE Department, Mail Stop 4A4, George Mason University, Fairfax, VA 22033, USA E-mail: sandhu@isse.gmu.edu;Laboratory for Information Security Technology, ISSE Department, Mail Stop 4A4, George Mason University, Fairfax, VA 22033, USA E-mail: sandhu@isse.gmu.edu
Venue:
Journal of Computer Security
Year:
1999

Citing 0
Cited 7

An Oracle implementation of the PRA97 model for permission-role assignment

RBAC '98 Proceedings of the third ACM workshop on Role-based access control
Engineering authority and trust in cyberspace: the OM-AM and RBAC way

RBAC '00 Proceedings of the fifth ACM workshop on Role-based access control
Proposed NIST standard for role-based access control

ACM Transactions on Information and System Security (TISSEC)
A model for role administration using organization structure

SACMAT '02 Proceedings of the seventh ACM symposium on Access control models and technologies
An administration concept for the enterprise role-based access control model

Proceedings of the eighth ACM symposium on Access control models and technologies
An effective role administration model using organization structure

ACM Transactions on Information and System Security (TISSEC)
Administration in role-based access control

ASIACCS '07 Proceedings of the 2nd ACM symposium on Information, computer and communications security

Quantified Score

Hi-index	0.00

Visualization

Abstract

In role-based access control (RBAC) permissions are associated with roles, and users are made members of appropriate roles thereby acquiring the roles’ permissions. The principal motivation behind RBAC is to simplify administration. An appealing possibility is to use RBAC itself to manage RBAC, to further provide administrative convenience. In this paper we investigate one aspect of RBAC administration concerning assignment of users to roles. We define a role-based administrative model, called URA97 (User-Role Assignment ’97), for this purpose and describe its implementation in the Oracle database management system. Although our model is quite different from that built into Oracle, we demonstrate how to use Oracle stored procedures to implement it.