Detecting and resolving constraint conflicts in role-based access control

Abstract

The focus of existing researches on RBAC constraints has been predominantly on the specification of constraints, the detection and resolution of constraint conflicts have been overlooked and remain a significant research challenge. To address these concerns, we propose a set of detection rules for these conflicts. Furthermore, a flexible approach is provided to resolve internal constraint conflicts by defining two new concepts, i.e., priority rule and resolution policy.