Access control services integrated in current middleware technologies fall short whenever application-specific access control policies must be enforced. As a consequence, developers embed access control logic in the code, resulting in an unmaintainable access control enforcement. The authors use aspect-oriented software development techniques to better separate application logic and access control by describing the design and implementation of a modular access control service. They have implemented a prototype in CaesarJ, a research aspect-oriented programming language.
Index Terms:
design tools, security, access control, aspect-oriented programming
Citation:
Tine Verhanneman, Frank Piessens, Bart De Win, Eddy Truyen, Wouter Joosen, "A Modular Access Control Service for Supporting Application-Specific Policies," IEEE Distributed Systems Online, vol. 7, no. 6, pp. 1, June 2006, doi:10.1109/MDSO.2006.37