Visual Authorization Policies in a Process Support System

Abstract

We present an approach to integrate a visual authorization policy management system based on RBAC and XACM in the ADAMS (ADvanced Artifact Management System) Process Support System. ADAMS is a Web-based system that integrates project management features such as resource allocation and process control and artifact management features, such as coordination of cooperative workers and artifact versioning, as well as context-awareness. We propose a hierarchy of visual languages aiming to support project managers and security administrators in modeling RBAC based access policies in ADAMS. The visual sentences are translated into XACML and stored into a Policy Repository. In this way the Policy Management System is able to process XACML requests and compare them against the defined access policies