Issue No. 02 - April (1994 vol. 6)
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/69.277771
<p>The integration of object-oriented programming concepts with databases is one of the most significant advances in the evolution of database systems. Many aspects of such a combination have been studied, but there are few models to provide security for this richly structured information. We develop an authorization model for object-oriented databases. This model consists of a set of policies, a structure for authorization rules, and algorithms to evaluate access requests against the authorization rules. User access policies are based on the concept of inherited authorization applied along the class structure hierarchy. We propose also a set of administrative policies that allow the control of user access and its decentralization. Finally, we study the effect of class structuring changes on authorization.</p>
object-oriented databases; authorisation; database theory; object-oriented databases; object-oriented programming concepts; security evaluation; security administration; authorization model; inherited authorization; authorization rule structure; access requests; user access policies; class structure hierarchy; administrative policies; decentralization; class structuring changes; database security
E. Gudes, E. Fernandez and H. Song, "A Model for Evaluation and Administration of Security in Object-Oriented Databases," in IEEE Transactions on Knowledge & Data Engineering, vol. 6, no. , pp. 275-292, 1994.