[[TOC(Internal/Rbac, Internal/Rbac/OrbitRbacLevels, Internal/Rbac/OrbitRbacDesign, Internal/Rbac/OrbitRbacDesign/ThreatAnalysis, Internal/Rbac/OrbitRbacDesign/ResourcesRoles, Internal/Rbac/OrbitRbacDesign/ImplementationResearch, Internal/Rbac/OrbitRbacDesign/AuditingTools, Internal/Rbac/OrbitRbacDesign/ConsistencyChecking, Internal/Rbac/OrbitRbacDesign/NistRbacSoftware, Internal/Rbac/OrbitRbacDesign/SolarisRbac, Internal/Rbac/OrbitRbacDesign/OasisRbac, Internal/Rbac/OrbitRbacDesign/xoRbac, Internal/Rbac/OrbitRbacDesign/DesignByWiki, Internal/Rbac/OrbitRbacDesign/OpenIssues, Internal/Rbac/OrbitRbacDesign/WorkToDo, Internal/Rbac/LdapResources, Internal/Rbac/RbacResources)]] ==== xoRBAC ==== xoRBAC seems to have many of the features required for ORBIT RBAC. It is a prototype implementation of unknown reliability though, and it is written in a dynamic scripting language that might lead to maintainability issues. [[http://wi.wu-wien.ac.at/home/neumann/ Neumann]] and [[http://wi.wu-wien.ac.at/home/mark/ Strembeck]] discuss the design and implementation of an RBAC service xoRBAC in an object-oriented scripting language XOTcl [[http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/neumann01design.pdf NS01]], [[http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/p65-strembeck.pdf NS03]], and [[http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/p392-strembeck.pdf SN04]], and Strembeck discusses the implementation of conflict checking of separation of duty constraints in RBAC [[http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/se2004.pdf Str04]]. Strembeck describes a role engineering tool xoRET for RBAC in [[http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/sreis05.pdf Str05b]]. Neumann and Zdun introduce the object-oriented scripting language XOTcl which is based on OTcl from MIT in [[http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/neumann00xotcl.pdf NZ00]]. The [[http://media.wu-wien.ac.at/ XOTcl]] site describes XOTcl as an open source project and has very recent downloadable software and documentation including a [[http://mini.net/tcl/XOTcl XOTcl wiki]] although the [[http://packages.qa.debian.org/x/xotcl.html Debian Linux package information]] shows it to be an orphan that has not been updated since 2001. The XOTcl site also states that XOTcl is included in [[http://www.activestate.com/Products/ActiveTcl/ ActiveTcl]] that is a product of [[http://www.activestate.com/ ActiveState]] and is available free after signing an education license. Strembeck describes the application programming interface (API) for xoRBAC in [[http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/xoRBAC-API-Reference.pdf Str06]]. See [[http://wi.wu-wien.ac.at/home/mark/xoRBAC/index.html xoRBAC]] for downloadable xoRBAC software.