In role-based access control RBAC permissions are associated with roles, and users are made members of appropriate roles thereby acquiring the roles' permissions. Using RBAC to manage RBAC provides additional administrative convenience. ARBAC97 is an administrative model recently proposed by Sandhu et al SBC+ 97 . In this paper we demonstrate the implementation of one of the components of ARBAC97 which deals with permission-role assignment and is called PRA97. Although PRA97 is quite di erent from that built into the Oracle database management system, we demonstrate how to use Oracle stored procedures to implement it.
Ravi S. Sandhu, Venkata Bhamidipati