Modeling and design of role engineering in development of access control for dynamic information systems

Abstract

Abstract. Nowadays, the growth and complexity of functionalities of current information systems, especially dynamic, distributed and heterogeneous information systems, makes the design and creation of such systems a difficult task and at the same time, strategic for businesses. A very important stage of data protection in an information system is the creation of a high level model, independent of the software, satisfying the needs of system protection and security. The process of role engineering, i.e. the identification of roles and setting up in an organization is a complex task.The paper presents the modeling and design stages in the process of role engineering in the aspect of security schema development for information systems, in particular for dynamic, distributed information systems, based on the role concept and the usage concept. Such a schema is created first of all during the design phase of a system. Two actors should cooperate with each other in this creation process, the application developer and the security administrator, to determine the minimal set of user's roles in agreement with the security constraints that guarantee the global security coherence of the system.

Understanding Actor Roles in Inter-organizational Digital Public Services

“…The cases affirm how perspective roles can change over the service's life cycle [1,5,30,42]. In the case of My Citizen Profile the roles shifted as the phases of the service progressed from piloting to operationalization/expansion and as new public service providers (who integrate particular services or deliver particular citizen data to the application) became involved.…”

“…In an enterprise architecture approach, roles comprise the responsibilities undertaken in different process steps and a role model describing the roles in a service can be seen as complementary to a service's process and data models [7]. Poniszewska-Marańda [30] highlights the complexity of identifying and organizing roles, especially in settings where roles are not very formalized, such as within organizations. Regarding access control models, the author represents roles as a set of functions, i.e., actions actors can undertake to achieve the responsibilities they are assigned to.…”

Kubernetes Cluster for Automating Software Production Environment

“…This principle recommends that only the needed resources or permissions should be granted [ 5 ]. Using Role-Based Access Control (RBAC) to manage access to a cluster [ 5 , 34 , 35 ]. Ensuring security keys management and exchange by implementing for example automated key rotation.…”

Integrated mathematical model of competence-based learning-teaching process

“…discrete-event models) [43]. However, the open aspect of the learning-teaching process has features that demands carefully selected modelling approach.…”