Conflict checking of separation of duty constraints in RBAC - implementation experiences

Separation of duty constraints define mutual exclusion relations between two entities (e.g. two permissions). Thus, a software component that supports the definition of separation of duty constraints implicitly requires a means to control their definition and to ensure the consistency of the resulting runtime structures. In this paper, we present our experiences with the implementation of conflict-checking methods for separation of duty constraints in the XORBAC access control service. KEY WORDS Role-based Access Control, Separation of Duty

• Type: Conference
• Year: 2004
• Where: IASTEDSE
• Authors: Mark Strembeck
• Keywords: Access Control, Duty Constraints, IASTEDSE 2004, Mutual Exclusion Relations, Software Engineering