Defining access control rules with conditions

  • Authors:
  • Mark H. Linehan

  • Affiliations:
  • IBM T.J. Watson Research Center

  • Venue:
  • RuleML'10 Proceedings of the 2010 international conference on Semantic web rules
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

The Business Entity method is a new approach for declarative Business Process Modeling. An important aspect of this method is access control rules that determine what users can access what data under what conditions. This paper describes an extension of Semantics of Business Vocabulary and Business Rules (SBVR) for defining these access control rules. A tool supports the creation of these data access control rules by a combination of a matrix format and conditions given in SBVR Structured English. The rules are stored according to the SBVR metamodel, and may be visualized either as individual rules or in a matrix.