Regulating access to XML documents

被引：0

作者：

Gabillon, A ^{[1
]}

Bruno, E ^{[1
]}

机构：

[1] Univ Pau, IUT Antenne Mont Marsan, CSYSEC, LIUPPA, F-40004 Mont De Marsan, France

来源：

DATABASE AND APPLICATION SECURITY XV | 2002年 / 87卷

关键词：

security model; subject; object; authorisation rule; access controls; XML; XPath; XSLT;

D O I：

暂无

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

In this paper, our objective is to define a security model for regulating access to XML documents. Our model offers a security policy with a great expressive power. An XML document is represented by a tree. Nodes of this tree are of different type (element, attribute, text, comment...etc). The smallest protection granularity of our model is the node, that is, authorisation rules granting or denying access to a single node can be defined. The authorisation rules related to a specific XML document are first defined on a separate Authorisation sheet. This Authorisation sheet is then translated into an XSLT sheet. If a user requests access to the XML document then the XSLT processor uses the XSLT sheet to provide the user with a view of the XML document which is compatible with his rights.

引用

页码：299 / 314

页数：16