A taxonomy of views in OODBS

Mishra, Priti; Eich, Margaret H.

doi:10.1145/197530.197584

Cited by 2 publications

(2 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Database views are attribute-oriented and not methodoriented, however, and do not support the flexible kinds of access control demonstrated in our example. This is true even for object-oriented databases [22]. Brose [4] describes a 'view-based' mechanism for Corba but this is again simply a kind of language-based per-method access control.…”

Section: Related Workmentioning

confidence: 99%

Supporting parameterised roles with object-based access control

Evered

2003

36th Annual Hawaii International Conference on System Sciences, 2003. Proceedings of The

View full text Add to dashboard Cite

The per-method access control lists of standard internet technologies allow only simple forms of access control to be expressed and enforced. They also fail to enforce a strict need-to-know view of persistent data. Real applications require more flexible security constraints including parameter restrictions, logging of accesses and state-dependent access constraints. In particular, the concept of parameterised roles, central to a fine-grained specification of access rules and compliance with privacy laws, should be supported in a natural way. In this paper we demonstrate how an object-based approach using the mechanism of bracket capabilities can be used to enforce various kinds of access constraints including discretionary, mandatory and parameterised role-based access control. We give examples from a health information system incorporating secure patient access and secure access by appropriate medical and administrative personnel.

show abstract

Section: Related Workmentioning

confidence: 99%

Supporting parameterised roles with object-based access control

Evered

2003

36th Annual Hawaii International Conference on System Sciences, 2003. Proceedings of The

View full text Add to dashboard Cite

show abstract

“…Traditional database views are attribute-oriented and not method-oriented, however, and therefore cannot support the flexible kinds of access control required for minimal access. This attribute-orientation is true even for most object-oriented databases [15]. Notable exceptions are the method-based model of Fernandez, Larrondo-Petrie and Gudes [8] and the CACL system of Richardson, Schwarz and Cabrera [16].…”

mentioning

confidence: 99%

Object-oriented Access Control in Jarrah.

Evered¹

2005

JOT

View full text Add to dashboard Cite

Given the sensitivity of the data stored in many information systems and the use of networks to support distributed applications, it is increasingly important to enable precise control of who can access the data in what way. Standard per-method access control lists are not sufficient to capture the complexity of the access constraints which arise if the concept of minimal access is taken seriously. In this paper we describe and justify the design of the access control aspect of the persistent object-oriented language Jarrah, a Java extension for programming secure distributed applications.

show abstract

A taxonomy of views in OODBS

Cited by 2 publications

References 0 publications

Supporting parameterised roles with object-based access control

Supporting parameterised roles with object-based access control

Object-oriented Access Control in Jarrah.

Contact Info

Product

Resources

About