The DOI matches its Crossref record; 8 of the 8 references it cites were found in a registry or an index.
Role-based authorization constraints specification
Abstract
Constraints are an important aspect of role-based access control (RBAC) and are often regarded as one of the principal motivations behind RBAC. Although the importance of contraints in RBAC has been recogni zed for a long time, they have not recieved much attention. In this article, we introduce an intuitive formal language for specifying role-based authorization constraints named RCL 2000 including its basic elements, syntax, and semantics. We give soundness and completeness proofs for RCL 2000 relative to a restricted form of first-order predicate logic. Also, we show how previously identified role-based authorization constraints such as separtation of duty (SOD) can be expressed in our language. Moreover, we show there are other significant SOD properties that have not been previously identified in the literature. Our work shows that there are many alternate formulations of even the simplest SOD properties, with varying degree of flexibility and assurance. Our language provides us a rigorous foundation for systematic study of role-based authorization constraints.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Role-based access control models
Sandhu, R. S., Coyne, E. J., Feinstein, H. L., & Youman, C. E. (1996) · Computer · doi:10.1109/2.485845 · Cited by 5,892
Self-citationThe NIST model for role-based access control: towards a unified standard
Sandhu, R., Ferraiolo, D., & Kuhn, R. (2000) · Proceedings of the fifth ACM workshop on Role-based access control · doi:10.1145/344287.344301 · Cited by 877
Self-citationLattice-based access control models
Sandhu, R. S. (1993) · Computer · doi:10.1109/2.241422 · Cited by 714
Self-citationConfiguring role-based access control to enforce mandatory and discretionary access control policies
Osborn, S., Sandhu, R., & Munawer, Q. (2000) · ACM Transactions on Information and System Security · doi:10.1145/354876.354878 · Cited by 576
Self-citationSeparation of duty in role-based environments
Simon, R. T., & Zurko, M. E. (2002) · Proceedings 10th Computer Security Foundations Workshop · doi:10.1109/csfw.1997.596811 · Cited by 349
Kuhn, D. R. (1997) · Proceedings of the second ACM workshop on Role-based access control - RBAC '97 · doi:10.1145/266741.266749 · Cited by 158
The RSL99 language for role-based separation of duty constraints
Ahn, G., & Sandhu, R. S. (1999) · ACM Symposium on Access Control Models and Technologies (SACMAT) · doi:10.1145/319171.319176 · Cited by 128
Self-citationOn the increasing importance of constraints
Jaeger, T. (1999) · ACM Symposium on Access Control Models and Technologies (SACMAT) · doi:10.1145/319171.319175 · Cited by 72
Cited by
Proposed NIST standard for role-based access control
Ferraiolo, D. F., Sandhu, R., Gavrila, S., Kuhn, D. R., & Chandramouli, R. (2001) · ACM Transactions on Information and System Security · doi:10.1145/501978.501980 · Cited by 2,544
Self-citationData security and privacy-preserving in edge computing paradigm: survey and open issues
Zhang, J., Chen, B., Zhao, Y., Cheng, X., & Hu, F. (2018) · IEEE Access · doi:10.1109/access.2018.2820162 · Cited by 514
A model of OASIS role-based access control and its support for active security
Bacon, J., Moody, K., & Yao, W. (2002) · ACM Transactions on Information and System Security · doi:10.1145/581271.581276 · Cited by 259
Metadata
- Authors
- Ahn, G.-J., & Sandhu, R.
- Venue
- ACM Transactions on Information and System Security
- Published
- 2000-11
- Volume
- 3
- Issue
- 4
- Pages
- 207-226
- ISSN
- 1094-9224 (ISSN-L)
- 1557-7406
- OpenAlex
- W2021079739
- Cited by
- 416
- References
- 8
- FWCI
- 68.49
- Type
- journal article
- Language
- en
- Open access
- closed
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Role-based authorization constraints specification. https://app.cochat.ai/papers/10.1145/382912.382913
- The paper
- Ahn, G.-J., & Sandhu, R. (2000). Role-based authorization constraints specification. ACM Transactions on Information and System Security. https://doi.org/10.1145/382912.382913
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
