A Community Authorization Service for Group Collaboration

  • Authors:
  • L. Pearlman;V. Welch;I. Foster;C. Kesselman;S. Tuecke

  • Affiliations:
  • -;-;-;-;-

  • Venue:
  • POLICY '02 Proceedings of the 3rd International Workshop on Policies for Distributed Systems and Networks (POLICY'02)
  • Year:
  • 2002

Quantified Score

Hi-index 0.00

Visualization

Abstract

In "Grids" and "collaboratories," we find distributedcommunities of resource providers and resourceconsumers, within which often complex and dynamicpolicies govern who can use which resources for whichpurpose. We propose a new approach to therepresentation, maintenance, and enforcement of suchpolicies that provides a scalable mechanism forspecifying and enforcing these policies. Our approachallows resource providers to delegate some of theauthority for maintaining fine-grained access controlpolicies to communities, while still maintaining ultimatecontrol over their resources. We also describe a prototypeimplementation of this approach and an application in adata management context.