Preserving SQL access control policies over published XML data

  • Authors:
  • Gregory Leighton

  • Affiliations:
  • University of Alberta, Edmonton, Canada

  • Venue:
  • Proceedings of the 2009 EDBT/ICDT Workshops
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

Controlling access to data is of paramount importance to many database applications. In data integration and data interchange scenarios, relational data is published as XML, and it is natural to require that all existing access control policies defined over the relational data be completely -- and verifiably -- preserved over the XML representation. While many XML-specific access control models have been proposed, there currently is no automated method for converting an SQL access control policy to an equivalent policy in one of these models. Instead, the database administrator must carry out such translations manually, a tedious and error-prone process which can easily lead to the unintentional granting of user access to restricted data. This work seeks to develop such an automated solution, and to examine various related issues such as optimization and verification of generated XML access control policies.