Changes between Version 100 and Version 101 of Old/SolarisRbac
- Timestamp:
- Aug 23, 2006, 8:34:09 PM (18 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
Old/SolarisRbac
v100 v101 13 13 Sawib Ali's e-mail [http://seclists.org/webappsec/2005/q3/0254.html FYI: RBAC for WebApps using LDAP] 14 14 15 ⋈ ∇ ''O''(10) ⌀ ¥ pasted from HTML trick vs. ¥ pasted from KCharSelect 15 == RBAC Resources == 16 16 17 {{{ 18 #!html 19 <h1> ⟪⟫⥡⩥⧹▤¥⨟ </h1> 20 }}} 17 There is an extensive RBAC book that also employs formal methods: [[http://www.amazon.com/gp/product/1580533701/102-0938547-5630513?v=glance&n=283155 Role-Based Access Control]], David F. Ferraiolo, D. Richard Kuhn, and Ramaswamy Chandramouli, Artech House, Inc., Norwood, MA, USA, 2003. 21 18 22 23 24 == RBAC Resources == 19 The National Institue of Standards and Technology maintains an extensive RBAC web site [[http://csrc.nist.gov/rbac/ Role Based Access Control]] edited by David Ferraiolo, Rick Kuhn, Ramaswamy Chandramouli, and John Barkley. 25 20 26 21 Role Based Access Control (RBAC) is now an American Standard: [[ftp://orbit-lab.org/internal3/ANSI+INCITS+359-2004.pdf American National Standard for Information Technology - Role Based Access Control]] , American National Standards Institute Inc, ANSI INCITS 359-2004, February 2004. 27 22 28 The RBAC standard uses the Z Formal Specification Notation that is an International Standard: [[ftp://orbit-lab.org/internal3/c021573_ISO_IEC_13568_2002E.pdf Information Technology - Z Formal Specification Notation - Syntax, Type System and Semantics]], ISO/IEC International Standard 13568:2002 , July 2002. Another Z reference: [[ftp://orbit-lab.org/internal3/zrm.pdf ''The Z Notation: A Reference Manual, Second Edition'']], J. M. Spivey, Oriel College, Oxford, UK, 1998.23 The RBAC standard uses the Z Formal Specification Notation that is an International Standard: [[ftp://orbit-lab.org/internal3/c021573_ISO_IEC_13568_2002E.pdf Information Technology - Z Formal Specification Notation - Syntax, Type System and Semantics]], ISO/IEC International Standard 13568:2002(E), July 2002. An important Z reference: [[ftp://orbit-lab.org/internal3/zrm.pdf The Z Notation: A Reference Manual, Second Edition]], J. M. Spivey, Oriel College, Oxford, UK, 1998. 29 24 30 The Z Formal Specification Notation uses a number of special symbols t hat can be represented in [[http://www.unicode.org Unicode]], and although Trac uses Unicode internally, some of these symbols may not display with any of the fonts available on your browser. Any Unicode code point can be entered in Trac in an HTML block like this following one thencut and pasted from the resulting page.25 The Z Formal Specification Notation uses a number of special symbols to specify the actions of RBAC methods. Each of these special symbols can be represented in [[http://www.unicode.org Unicode]], and although Trac uses Unicode internally, some of these symbols may not display with any of the fonts available on your browser. Any Unicode code point can be entered in Trac in an HTML block like the blue one below on the right, then that character may be cut and pasted from the resulting page. 31 26 32 27 {{{ … … 34 29 <h1 style="text-align: right; color: blue"> ∀⟪⟦⊦⩥⧹⋃⟧⟫ </h1> 35 30 }}} 36 37 There is a book [[ftp://orbit-lab.org/internal3/861998.pdf ''Role-Based Access Control'']], David F. Ferraiolo, D. Richard Kuhn, and Ramaswamy Chandramouli, Artech House, Inc., Norwood, MA, USA, 2003.38 39 The National Institue of Standards and Technology maintains an extensive RBAC web site [[http://csrc.nist.gov/rbac/ Role-Based Access Control]] edited by David Ferraiolo, Rick Kuhn, Ramaswamy Chandramouli, and John Barkley.