Bookmarks

Yahoo Gmail Google Facebook Delicious Twitter Reddit Stumpleupon Myspace Digg

Search queries

sqldatasource dal, wwwxxxenden, convert raid5 to raid 10 mdadm, apache force chunked, nrao wwwxxx, xxxxxdup, procmail change subject header, wwwXxx not20, Wwwxxx.doks sas, linux raid resync after reboot

Links

XODOX
Impressum

#1: filter expressions for access control

Posted on 2005-06-21 11:09:15 by Markus.Elfring

Most access control lists allow the specification of groups. I would
like to be able to enter more powerful filters that dynamically return
result sets for principals instead of "static" predefined groups and
communities.
Which rights management systems do offer the capability to specify
restrictions in a syntax that can be similar to where clauses in SQL?

Examples:
1. site in ('DU', 'HH')
2. leader_level >= 3
3. department like 'sales%'
4. project_organization = 'internet'
5. (region = 'Europe') and (product_category = 'fruits')

Do you know a resource access decision service that can work with such
patterns?

Regards,
Markus

Report this message

#2: Re: filter expressions for access control

Posted on 2005-06-24 14:53:39 by Mitchel

2AB's iLock security services supports complex rules like you have
described.(www.2ab.com)

Markus.Elfring@web.de wrote:
> Most access control lists allow the specification of groups. I would
> like to be able to enter more powerful filters that dynamically return
> result sets for principals instead of "static" predefined groups and
> communities.
> Which rights management systems do offer the capability to specify
> restrictions in a syntax that can be similar to where clauses in SQL?
>
> Examples:
> 1. site in ('DU', 'HH')
> 2. leader_level >= 3
> 3. department like 'sales%'
> 4. project_organization = 'internet'
> 5. (region = 'Europe') and (product_category = 'fruits')
>
> Do you know a resource access decision service that can work with such
> patterns?
>
> Regards,
> Markus

Report this message

#3: Re: filter expressions for access control

Posted on 2005-07-08 13:12:32 by Markus.Elfring

> 2AB's iLock security services supports complex rules like you have described.

Are more alternatives for this kind of implementation available?

Regards,
Markus

Report this message