wiki:Internal/Rbac/OrbitRbacDesign/xoRbac

Version 16 (modified by (none), 18 years ago) ( diff )

—

Table of Contents

    1. Role-Based Access Control
    1. RBAC Reference Model
      1. Previous Work
      2. Design Issues
        1. ORBIT Design Goals and Threats
        1. Resources and Roles
        1. Research for Implementation
        1. Auditing Tools
        1. Consistency Checking
        1. NIST RBAC Software
        1. Solaris RBAC Software
        1. OASIS RBAC
        1. xoRBAC
        1. Designing Using Wiki
        1. Open Issues
    1. LDAP client / server implementation on ORBIT and WINLAB
    2. LDAP Resources
    3. LDAP References
    1. RBAC Resources
    2. RBAC References

xoRBAC

xoRBAC seems to have many of the features required for ORBIT RBAC. It is a prototype implementation of unknown reliability though, and it is written in a dynamic scripting language that might lead to maintainability issues.

​http://wi.wu-wien.ac.at/home/neumann/ Neumann and ​http://wi.wu-wien.ac.at/home/mark/ Strembeck discuss the design and implementation of an RBAC service xoRBAC in an object-oriented scripting language XOTcl ​http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/neumann01design.pdf NS01, ​http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/p65-strembeck.pdf NS03, and ​http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/p392-strembeck.pdf SN04, and Strembeck discusses the implementation of conflict checking of separation of duty constraints in RBAC ​http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/se2004.pdf Str04.

Strembeck describes a role engineering tool xoRET for RBAC in ​http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/sreis05.pdf Str05b.

Neumann and Zdun introduce the object-oriented scripting language XOTcl which is based on OTcl from MIT in ​http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/neumann00xotcl.pdf NZ00. The ​http://media.wu-wien.ac.at/ XOTcl site describes XOTcl as an open source project and has very recent downloadable software and documentation including a ​http://mini.net/tcl/XOTcl XOTcl wiki although the ​http://packages.qa.debian.org/x/xotcl.html Debian Linux package information shows it to be an orphan that has not been updated since 2001. The XOTcl site also states that XOTcl is included in ​http://www.activestate.com/Products/ActiveTcl/ ActiveTcl that is a product of ​http://www.activestate.com/ ActiveState and is available free after signing an education license.

Strembeck describes the application programming interface (API) for xoRBAC in ​http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/xoRBAC-API-Reference.pdf Str06. See ​http://wi.wu-wien.ac.at/home/mark/xoRBAC/index.html xoRBAC for downloadable xoRBAC software.

Note: See TracWiki for help on using the wiki.