Access Control Using Extended Role Graph Corresponding to Organizational Hierarchy

Abstract

Changes should continuously occur to enterprise applications whenever organizational structure and business processes are changed. However, the application modification means that the access control modules become more complicated in order to control application users, roles for users, and permissions depending on roles of an organization. This problem was tackled traditionally with the access control mechanism. However, the RoleBased Access Control (RBAC) is recently more actively being researched as a superior mechanism. In this paper, we propose the Extended Role Graph (ERG) approach for assigning and inherit permissions to enhance the RBAC mechanism. The ERG method overcomes the limitations in the existing RBAC and provides a more solid workflow security.