Role and task-based access control in the PerDiS groupware platform

Abstract

A roleand task-based access control scheme has been developed for use in a class of activities that entail cooperation between principals in a virtual enterprise (VE). Data ownership is associated with the component organisations of a VE, each of which constitutes a trust domain. The role/task model was chosen to meet the requirement for a generic access control scheme independent of application code. The model has been implemented for a software platform that provides shared access to clusters of replicated distributed objects. Implications arising from the integration of the access control model with a data replication scheme are discussed.