As companies migrate from a centralized to a distributed computing environment, the administration and management of security policies, in particular authorization policies, is becoming an increasingly difficult task. This paper considers the design of an authorization system that is suitable for distributed applications. It discusses the architectural design principles, describes the constructs of the authorization policy language and outlines the authorization service and components involved. The paper gives some examples policy specifications and illustrates how privileges are specified and evaluated as well as how privilege resolutions are achieved.

No abstract

No abstract

As companies migrate from a centralized to a distributed computing environment, the administration and management of security policies, in particular authorization policies, is becoming an increasingly difficult task. This paper considers the issues involved in the design of a secnre distributed authorization service. This paper discusses the architectural design principles, descrihes the Authorization Server architecture and components, briefly mentions some of the key authorization language constructs and outlines the steps involved in the construction of an authorization system in practice.

No abstract