Rinderle-Ma, Stefanie and Reichert, Manfred (2008) Managing the Life Cycle of Access Rules in CEOSIS. In: Proceedings of the 12th IEEE International Enterprise Computing Conference (EDOC'08), September, 2008, Munich, Germany.
Download (311kB)
Abstract
The definition and management of access rules (e.g., to control the access to business documents and business functions) is an important task within any enterprise information systems (EIS). Many EIS apply role-based access control (RBAC) mechanisms to specify access rules based on organizational models. However, only little research has been spent on organizational changes even though they often become necessary in practice. Examples comprise the evolution of organizational models with subsequent adaptation of access rules or direct access rule modifications. In this paper, we present a change framework for the controlled evolution of access rules in EIS. Specifically, we define change operations which ensure correct modification of access rules. Finally, we define the formal semantics of access rule changes based on operator trees which enables their unambiguous application; i.e., we can precisely determine which effects are caused by respective adaptations. This is important, for example, to be able to efficiently adapt user worklists in process-aware information systems. Altogether this paper contributes to comprehensive life cycle support for access rules in (adaptive) EIS.
Item Type: | Conference or Workshop Item (Paper) |
---|---|
Subjects: | DBIS Research > Publications |
Depositing User: | Prof. Dr. Manfred Reichert |
Date Deposited: | 03 Jun 2008 17:40 |
Last Modified: | 14 Oct 2011 10:26 |
URI: | http://dbis.eprints.uni-ulm.de/id/eprint/403 |