A design for parameterized roles

Abstract

Role-based access control eases the management of access control in cases where there are large numbers of objects and users. Roles provide certain access to specific data objects. In order to handle a very large number of users who each need the same access to slightly different data, we propose parameterized roles as an alternative to private roles. We motivate the requirement for parameterized roles, show how to define them, and show how with only very slight modifications, our role graph model can incorporate parameterized roles. © 2004 Springer Science + Business Media, Inc.