28/10/2008
Role Based Access Control
34
Summary and Links
lSummary
–There’s a lot to it, evolving standards
–Choice of library depends on language, platform, whether it’s enterprise, any special requirements
–Authentication and Authorisation
–At the simplest, use roles
–Then look at a lattice
–More complex may require RBAC
–
lLinks
–Slides at http://miltonkeynes.pm.org 
–Sandhu, R., Ferraiolo, D.F. and Kuhn, D.R. (July 2000). "The NIST Model for Role Based Access Control: Toward a Unified Standard" (PDF). 5th ACM Workshop Role-Based Access Control: 47-63.
l
lThank you. Any Questions?