Supporting Customized Views for Enforcing Access Control Constraints in Real-Time Collaborative Web Applications

Gaubatz, Patrick; Hummer, Waldemar; Zdun, Uwe; Strembeck, Mark

doi:10.1007/978-3-642-39200-9_18

Cited by 2 publications

(2 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In our ongoing work we also investigate the use of additional security annotations and an extended view of context information. Finally, we plan to shift from a process-centric to a more data-centric view and integrate the concept of entailment constraints to our recent work on reliability in event-based data processing [85] and collaborative Web applications [86] .…”

Section: Discussionmentioning

confidence: 99%

Enforcement of entailment constraints in distributed service-based business processes

Hummer

Gaubatz

Strembeck

et al. 2013

Information and Software Technology

Self Cite

View full text Add to dashboard Cite

ContextA distributed business process is executed in a distributed computing environment. The service-oriented architecture (SOA) paradigm is a popular option for the integration of software services and execution of distributed business processes. Entailment constraints, such as mutual exclusion and binding constraints, are important means to control process execution. Mutually exclusive tasks result from the division of powerful rights and responsibilities to prevent fraud and abuse. In contrast, binding constraints define that a subject who performed one task must also perform the corresponding bound task(s).ObjectiveWe aim to provide a model-driven approach for the specification and enforcement of task-based entailment constraints in distributed service-based business processes.MethodBased on a generic metamodel, we define a domain-specific language (DSL) that maps the different modeling-level artifacts to the implementation-level. The DSL integrates elements from role-based access control (RBAC) with the tasks that are performed in a business process. Process definitions are annotated using the DSL, and our software platform uses automated model transformations to produce executable WS-BPEL specifications which enforce the entailment constraints. We evaluate the impact of constraint enforcement on runtime performance for five selected service-based processes from existing literature.ResultsOur evaluation demonstrates that the approach correctly enforces task-based entailment constraints at runtime. The performance experiments illustrate that the runtime enforcement operates with an overhead that scales well up to the order of several ten thousand logged invocations. Using our DSL annotations, the user-defined process definition remains declarative and clean of security enforcement code.ConclusionOur approach decouples the concerns of (non-technical) domain experts from technical details of entailment constraint enforcement. The developed framework integrates seamlessly with WS-BPEL and the Web services technology stack. Our prototype implementation shows the feasibility of the approach, and the evaluation points to future work and further performance optimizations.

show abstract

Section: Discussionmentioning

confidence: 99%

Enforcement of entailment constraints in distributed service-based business processes

Hummer

Gaubatz

Strembeck

et al. 2013

Information and Software Technology

Self Cite

View full text Add to dashboard Cite

show abstract

“…It is founded on CoCoForm, a Web application framework for real-time collaboration, supporting access control [10,11].…”

Section: Methodsmentioning

confidence: 99%

Enforcing entailment constraints in offline editing scenarios for real-time collaborative web documents

Gaubatz

Hummer

Zdun

et al. 2014

Proceedings of the 29th Annual ACM Symposium on Applied Computing

Self Cite

View full text Add to dashboard Cite

Real-time collaborative Web applications allow a multitude of users to concurrently work on a shared document. Especially in business contexts it is often necessary to be able to precisely define and restrict who is allowed to edit which data field of such a shared document. Existing solutions for enforcing such access control restrictions typically rely on a central service, the policy decision point. However, for use cases with unreliable or limited connectivity, such as mobile devices, a permanent connection to this centralized policy decision point can not be guaranteed. To address this problem, we present a novel approach that includes methods for client-side enforcement of access control constraints for offline users, and merging of offline changes, that enables users to edit such access constrained shared documents offline. We propose a generic conflict detection and resolution approach that attempts to resolve merge conflicts that are inherent to access constrained documents automatically while prioritizing online users and maximizing the number of filled out data fields in a document. In addition, we discuss and evaluate our approach via a prototype implementation.

show abstract

Supporting Customized Views for Enforcing Access Control Constraints in Real-Time Collaborative Web Applications

Cited by 2 publications

References 18 publications

Enforcement of entailment constraints in distributed service-based business processes

Enforcement of entailment constraints in distributed service-based business processes

Enforcing entailment constraints in offline editing scenarios for real-time collaborative web documents

Contact Info

Product

Resources

About