filter expressions for access control
am 21.06.2005 11:09:15 von Markus.Elfring
Most access control lists allow the specification of groups. I would
like to be able to enter more powerful filters that dynamically return
result sets for principals instead of "static" predefined groups and
communities.
Which rights management systems do offer the capability to specify
restrictions in a syntax that can be similar to where clauses in SQL?
Examples:
1. site in ('DU', 'HH')
2. leader_level >= 3
3. department like 'sales%'
4. project_organization = 'internet'
5. (region = 'Europe') and (product_category = 'fruits')
Do you know a resource access decision service that can work with such
patterns?
Regards,
Markus
Re: filter expressions for access control
am 24.06.2005 14:53:39 von Mitchel
2AB's iLock security services supports complex rules like you have
described.(www.2ab.com)
Markus.Elfring@web.de wrote:
> Most access control lists allow the specification of groups. I would
> like to be able to enter more powerful filters that dynamically return
> result sets for principals instead of "static" predefined groups and
> communities.
> Which rights management systems do offer the capability to specify
> restrictions in a syntax that can be similar to where clauses in SQL?
>
> Examples:
> 1. site in ('DU', 'HH')
> 2. leader_level >= 3
> 3. department like 'sales%'
> 4. project_organization = 'internet'
> 5. (region = 'Europe') and (product_category = 'fruits')
>
> Do you know a resource access decision service that can work with such
> patterns?
>
> Regards,
> Markus