Fine-grained access control in hybrid relational-XML database

Abstract

In this paper, we propose a fine-grained access control based on logic programming in hybrid relational-XML database. Hybrid relational-XML database such as IBM DB2 can manage and query both XML and relational data. Our access control model provides a way to restrict data access at the cell-level for relational data and also at the node-level for XML data in a cell. Since our access control model dynamically produce authorization-views using logic programming when each user queries to the system, it enables us to manage views easily, unity management of databasepsilas contents and access policy. Finally we show the implementation our model and evaluate its performance.