An Oracle implementation of the PRA97 model for permission-role assignment

In role-based access control (RBAC) permissions are associated with roles, and users are made members of appropriate roles thereby acquiring the roles’ permissions. Using RBAC to manage RBAC provides additional administrative convenience. ARBAC97 is an administrative model recently proposed by Sandhu et al [SBC+97]. In this paper we demonstrate the implementation of one of the components of ARBAC97 which deals with permission-role assignment and is called PRA97. Although PRA97 is quite different from that built into the Oracle database management system, we demonstrate how to use Oracle stored procedures to implement it.