A Service-Centric Approach to a Parameterized RBAC Service

TL;DR

This paper presents a service-centric implementation of parameterized RBAC, enhancing permission specificity by integrating parameters into roles and permissions based on existing standards.

Contribution

It introduces a standardized, service-oriented approach to parameterized RBAC, expanding the flexibility and applicability of traditional RBAC models.

Findings

Enhanced permission specificity through parameterization

Implementation based on existing RBAC standards

Facilitates more granular access control

Abstract

Significant research has been done in the area of Role Based Access Control [RBAC]. Within this research there has been a thread of work focusing on adding parameters to the role and permissions within RBAC. The primary benefit of parameter support in RBAC comes in the form of a significant increase in specificity in how permissions may be granted. This paper focuses on implementing a parameterized implementation based heavily upon existing standards.