2008 Eighth International Conference on Web Engineering 2008
DOI: 10.1109/icwe.2008.15
|View full text |Cite
|
Sign up to set email alerts
|

Declarative Access Control for WebDSL: Combining Language Integration and Separation of Concerns

Abstract: In this paper, we present the extension of WebDSL, a domain-specific language for web application development, with abstractions for declarative definition of access control. The extension supports the definition of a wide range of access control policies concisely and transparently as a separate concern. In addition to regulating the access to pages and actions, access control rules are used to infer navigation options not accessible to the current user, preventing the presentation of inaccessible links. The … Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
1
1
1
1

Citation Types

0
33
0

Year Published

2008
2008
2015
2015

Publication Types

Select...
4
2

Relationship

4
2

Authors

Journals

citations
Cited by 29 publications
(33 citation statements)
references
References 19 publications
0
33
0
Order By: Relevance
“…Recursive templates support the presentation of nested structures. Declarative access control rules regulate the access to pages and actions [52]. Furthermore, some of the implementation patterns have been replaced by others, without affecting the design of the language.…”
Section: Discussion: Web Engineeringmentioning
confidence: 99%
See 1 more Smart Citation
“…Recursive templates support the presentation of nested structures. Declarative access control rules regulate the access to pages and actions [52]. Furthermore, some of the implementation patterns have been replaced by others, without affecting the design of the language.…”
Section: Discussion: Web Engineeringmentioning
confidence: 99%
“…However, identification of these abstractions leads to better insight in the domain, which may give rise to reformulations not directly inspired by programming patterns. For example, the access control extension of WebDSL [52] is not based on the facilities for access control provided by the Seam framework. Rather an expressive and declarative mechanism is developed enabled by the possibility to perform desugaring transformations on the DSL itself.…”
Section: Productivity and Difficultymentioning
confidence: 99%
“…6 we discuss high-level abstractions for web applications that can be expressed by transformation to the base language. We illustrate this using examples of modules, modular data model definitions, user interface templates, high-level polytypic user-interface elements, declarative access control rules [25], and workflow procedures [27], which can all be implemented using model-to-model transformations.…”
Section: Outlinementioning
confidence: 99%
“…This solution requires that access control checks are entangled with template definitions, which makes the policy encoded in the application hard to verify or modify. The WebDSL access control sublanguage [25] supports definition of access control policies as a separate concern. Access control rules are defined in a separate section (or module) in the application, and are woven into the corresponding Web-DSL definitions during compilation.…”
Section: Access Controlmentioning
confidence: 99%
See 1 more Smart Citation