guragmodelextensions内容摘要:

ABAC model referred as GURAG.  Example UAA rules User Attribute Assignment (UAA) 169。 Ravi Sandhu WorldLeading Research with RealWorld Impact! 7 Administrative Role Prerequisite Condition Allowed values Rule 1: Administrative Role DeptAdmin (or senior) can add any value in {TA, Grader} to user attribute ‘jobTitle’ if the user’s ‘studType’ attribute includes ‘Grad’ value. Common Policy Expression Language: EXPR(UA) in UAA:  Example UGAA rules User Group Attribute Assignment (UGAA) 169。 Ravi Sandhu WorldLeading Research with RealWorld Impact! 8 EXPR(UA) in UGAA: User to UserGroup Assignment (UGA) 169。 Ravi Sandhu WorldLeading Research with RealWorld Impact! 9 EXPR(UA ∪ UG) in UGA: Example UGA canAssign rules: Example UGA canRemove rules: studId: {abc12} skills: {c,java} roomAcc: {} USER GRADUATE GROUP (G) DeptAdmin (or senior) USER UGA studType: {Grad} roomAcc: {, , } userType: {student} college: {COS} univId: {12345} studId: {abc12} skills: {c,java} roomAcc: {, , , } studType: {Grad} userType: {student} college: {COS} univId: {12345} effective attributes effective attributes direct amp。 effective attributes 1 2 3 User to UserGroup As。
阅读剩余 0%
本站所有文章资讯、展示的图片素材等内容均为注册用户上传(部分报媒/平媒内容转载自网络合作媒体),仅供学习参考。 用户通过本站上传、发布的任何内容的知识产权归属用户或原始著作权人所有。如有侵犯您的版权,请联系我们反馈本站将在三个工作日内改正。