Modeling support for delegating roles, tasks, and duties in a process-related RBAC context

Abstract

The definition of access control concepts at the modeling level is an important prerequisite for the thorough implementation and enforcement of corresponding policies and constraints in a software system. In this paper, we present an approach to provide modeling support for the delegation of roles, tasks, and duties in the context of process-related RBAC models. The delegation model elements are integrated into a software engineering and business process context by providing UML2 modeling support for role-, task, and duty-level delegation. The semantics of our UML extension are formally specified via OCL constraints. © 2011 Springer-Verlag.