Bookmarks

Yahoo Gmail Google Facebook Delicious Twitter Reddit Stumpleupon Myspace Digg

Search queries

Use of assignment to $[ is deprecated at /usr/local/sbin/apxs line 86. , wwwxxx vim, mysql closing table and opening table, 800c5000, setgid operation not permitted, pciehp: acpi_pciehprm on IBM, WWWXXX.DBF, 078274121, info0a ip, should prodicers of software_based services be held liable or not liable for economic injuries

Links

XODOX
Impressum

#1: filter expressions for access control

Posted on 2005-06-21 11:09:15 by Markus.Elfring

Most access control lists allow the specification of groups. I would
like to be able to enter more powerful filters that dynamically return
result sets for principals instead of "static" predefined groups and
communities.
Which rights management systems do offer the capability to specify
restrictions in a syntax that can be similar to where clauses in SQL?

Examples:
1. site in ('DU', 'HH')
2. leader_level >= 3
3. department like 'sales%'
4. project_organization = 'internet'
5. (region = 'Europe') and (product_category = 'fruits')

Do you know a resource access decision service that can work with such
patterns?

Regards,
Markus

Report this message

#2: Re: filter expressions for access control

Posted on 2005-06-24 14:53:39 by Mitchel

2AB's iLock security services supports complex rules like you have
described.(www.2ab.com)

Markus.Elfring@web.de wrote:
> Most access control lists allow the specification of groups. I would
> like to be able to enter more powerful filters that dynamically return
> result sets for principals instead of "static" predefined groups and
> communities.
> Which rights management systems do offer the capability to specify
> restrictions in a syntax that can be similar to where clauses in SQL?
>
> Examples:
> 1. site in ('DU', 'HH')
> 2. leader_level >= 3
> 3. department like 'sales%'
> 4. project_organization = 'internet'
> 5. (region = 'Europe') and (product_category = 'fruits')
>
> Do you know a resource access decision service that can work with such
> patterns?
>
> Regards,
> Markus

Report this message

#3: Re: filter expressions for access control

Posted on 2005-07-08 13:12:32 by Markus.Elfring

> 2AB's iLock security services supports complex rules like you have described.

Are more alternatives for this kind of implementation available?

Regards,
Markus

Report this message