Consistency checking in access control

Abstract

As access control models have become more complex, tools should be developed to support the maintenance of policies. We have adapted a powerful privacy-aware role-based access control model to incorporate a context-restriction component to alleviate the policy maintenance complexity issue. We discuss how the process of entering policies and user-specified rules can be guided by a system that evaluates permission assignments when they are entered.