Using dynamic aspects for delegating fine-grained access rights

Abstract

This paper shows that a proper combination of instance-level aspects and dynamic deployment can be used to enhance an aspect-based access control system with dynamic and fine-grained delegation effectively in a highly modular manner. We developed a prototype implementation using the per instance interception mechanism of AspectWerkz. While workable, this mechanism still leaves much to be desired. We describe our implementation scheme and discuss the issues we encountered.