Detail publikačního výsledku

Advanced access control system for multi-tier server applications

CVRK, L.; VRBA, V.; MOLNÁR, K.

Originální název

Advanced access control system for multi-tier server applications

Anglický název

Advanced access control system for multi-tier server applications

Druh

Stať ve sborníku v databázi WoS či Scopus

Originální abstrakt

Server applications are one of the most important components of applications which use multi-tire architecture. These servers need to handle access of users. Access control logic is usually implemented directly inside an object which is responsible for performing required operations over the data. The object verifies access to its methods and permits or denies the operation. But systems usually consist of many such objects with different missions. All of these objects require similar access control system. This makes a greater overhead because access control verification must be coded inside all those objects. If in this approach a programmer forgets to verify some of required rights in the code then the system may encounter a forbidden data access. This article deals with that topic and designs a unified database layer working over relation databases. Benefits of this layer are strong simplification of the access control system and impossibility to access data without permissions.

Anglický abstrakt

Server applications are one of the most important components of applications which use multi-tire architecture. These servers need to handle access of users. Access control logic is usually implemented directly inside an object which is responsible for performing required operations over the data. The object verifies access to its methods and permits or denies the operation. But systems usually consist of many such objects with different missions. All of these objects require similar access control system. This makes a greater overhead because access control verification must be coded inside all those objects. If in this approach a programmer forgets to verify some of required rights in the code then the system may encounter a forbidden data access. This article deals with that topic and designs a unified database layer working over relation databases. Benefits of this layer are strong simplification of the access control system and impossibility to access data without permissions.

Klíčová slova

database, SQL, access control, DBMS abstraction

Klíčová slova v angličtině

database, SQL, access control, DBMS abstraction

Autoři

CVRK, L.; VRBA, V.; MOLNÁR, K.

Rok RIV

2010

Vydáno

20.04.2007

Nakladatel

IEEE Computer Society

Místo

Sainte-Luce

ISBN

0-7695-2807-4

Kniha

Proceeding of the Second International Conference on Systems

Strany od

1

Strany počet

6

BibTex

@inproceedings{BUT22797,
  author="Lubomír {Cvrk} and Vít {Vrba} and Karol {Molnár}",
  title="Advanced access control system for multi-tier server applications",
  booktitle="Proceeding of the Second International Conference on Systems",
  year="2007",
  number="1.",
  pages="6",
  publisher="IEEE Computer Society",
  address="Sainte-Luce",
  isbn="0-7695-2807-4"
}