DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MS.2010.154
ZAC is a practical lightweight library for access control in JavaScript based on aspect orientation. Its access control architecture is stack based, similar to those of Java and C#. However, ZAC integrates other features for more expressive access control. First, access control policies can be enforced at the level of objects, which permits more fine-grained control over resource access. Second, policies in ZAC can base their decisions on scripts' execution history. This lets developers express policies that are impossible to define using other models, such as bounded-time execution.
Index Terms:
language constructs and features, scripting languages, semantics, software, software engineering
Citation:
Rodolfo Toledo, Eric Tanter, "Access Control in JavaScript," IEEE Software, vol. 28, no. 5, pp. 76-84, Sep./Oct. 2011, doi:10.1109/MS.2010.154 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||