Flexible access control framework for MARC records

Abstract

2012),"Web-based library services in university libraries in India: an analysis of librarians' perspective", The Electronic Library, Vol. 30 Iss 5 pp. 569-588 http://dx.If you would like to write for this, or any other Emerald publication, then please use our Emerald for Authors service information about how to choose which publication to write for and submission guidelines are available for all. Please visit www.emeraldinsight.com/authors for more information. About Emerald www.emeraldinsight.comEmerald is a global publisher linking research and practice to the benefit of society. The company manages a portfolio of more than 290 journals and over 2,350 books and book series volumes, as well as providing an extensive range of online products and additional customer resources and services.Emerald is both COUNTER 4 and TRANSFER compliant. The organization is a partner of the Committee on Publication Ethics (COPE) and also works with Portico and the LOCKSS initiative for digital archive preservation. AbstractPurpose -The goal of this paper is to propose a data access control framework that is used for editing MARC-based bibliographic databases. In cases where the bibliographic record editing activities carried out in libraries are complex and involve many people with different skills and expertise, a way of managing the workflow and data quality is needed. Enforcing access control can contribute to these goals. Design/methodology/approach -The proposed solution for data access control enforcement is based on the well-studied standard role-based access control (RBAC) model. The bibliographic data, for the purpose of this system, is represented using the XML language. The software architecture of the access control system is modelled using the Unified Modelling Language (UML). Findings -The access control framework presented in this paper represents a successful application of concepts of role-based access control to bibliographic databases. The use of XML language for bibliographic data representation provides the means to integrate this solution into many different library information systems, facilitates data exchange and simplifies the software implementation because of the abundance of available XML tools. The solution presented is not dependent on any particular XML schema for bibliographic records and may be used in different library environments. Its flexibility stems from the fact that access control rules can be defined at different levels of granularity and for different XML schemas. Research limitations/implications -This access control framework is designed to handle XML documents. Library systems that utilise bibliographic databases in other formats not easily convertible to XML would hardly integrate the framework into their environment. Practical implications -The use of an access control enforcement framework in a bibliographic database can significantly improve the quality of data in organisations where record editing is performed by a large number of people with different skills. The examples of acc...

A Flexible System for Request Processing in Government Institutions

“…Additionally, access control will be strengthened by introducing document and document-fragment-level access rights. For this purpose we plan to use eXtensible XML Access Control Framework [36,37,38]. Furthermore, ontologies will be added to increase e-requests semantics and appropriate XML elements representing this knowledge will be introduced into XML document representation.…”

Context-sensitive constraints for access control of business processes

“…Their approach grants and adapts permissions to users based on a set of contextual information collected from environments of the system. Usage of the context-sensitive access control for controlling XML documents is presented in the papers [8] [41] [42]. Influence of temporal constraints to access control is probably the most detailed analyzed in [31] [4] while the influence of geospatial constraints is presented in [5] [14].…”

Computer aided anonymization and redaction of judicial documents

“…eXtensible XML Role-Based Access Control Framework (XXACF) [31,32,33] enables access control definition and enforcement for XML documents. XXACF access control model is based on the RBAC model, extended to support different granularity levels, and they may be content dependent, thus facilitating efficient management of access control.…”