Common Representation of Information Flows for Dynamic Coalitions

We propose a formal foundation for reasoning about access control policies within a Dynamic Coalition, defining an abstraction over existing access control models and providing mechanisms for translation of those models into information-flow domain. The abstracted information-flow domain model, called a Common Representation, can then be used for defining a way to control the evolution of Dynamic Coalitions with respect to information flow

How to break access control in a controlled manner

The Electronic Medical Record (EMR) integrates heterogeneous information within a Healthcare Institution stressing the need for security and access control. The Biostatistics and Medical Informatics Department from Porto Faculty of Medicine has recently implemented a Virtual EMR (VEMR) in order to integrate patient information and clinical reports within a university hospital. With more than 500 medical doctors using the system on a daily basis, an access control policy and model were implemented. However, the healthcare environment has unanticipated situations (i.e. emergency situations) where access to information is essential. Most traditional policies do not allow for overriding. A policy that allows for Break-The-Glass (BTG) was implemented in order to override access control whilst providing for non-repudiation mechanisms for its usage. The policy was easily integrated within the model confirming its modularity and the fact that user intervention in defining security procedures is crucial to its successful implementation and use

Customer Service Employees and Discretionary Service Behavior: A Psychological Contract Model

We present a theoretical framework for explicating contact employee behavior during customer service encounters, labeled discretionary service behavior (DSB). The model takes an organizational justice perspective, incorporating psychological contracts and fairness perceptions. We define DSB, examine potential antecedents, present research propositions related to the model, and discuss potential organizational outcomes

Authorization algorithms for permission-role assignments

Permission-role assignments (PRA) is one important process in Role-based access control (RBAC) which has been proven to be a flexible and useful access model for information sharing in distributed collaborative environments. However, problems may arise during the procedures of PRA. Conflicting permissions may assign to one role, and as a result, the role with the permissions can derive unexpected access capabilities. This paper aims to analyze the problems during the procedures of permission-role assignments in distributed collaborative environments and to develop authorization allocation algorithms to address the problems within permission-role assignments. The algorithms are extended to the case of PRA with the mobility of permission-role relationship. Finally, comparisons with other related work are discussed to demonstrate the effective work of the paper

Hired Guns and Moral Torpedoes: Balancing the Competing Moral Duties of the Public Relations Professional

Public relations helps an organisation and its publics adapt mutually to each other. However, this does not mean that the profession is value neutral or anything goes. There will be cases where professionals have to make discretionary ethical decisions and negotiate their roles and responsibilities, especially when faced with novel or difficult issues. In this conceptual paper, we describe how the notion of professional role morality not only shapes the individual struggles that practitioners endure but also highlights the organisational structures that foster or shun ethics in the decision-making process. Thus we provide a means of assessing professional action that balances the urge to become a hired gun who simply abdicates personal responsibility and completely adopts the employer’s moral viewpoint on the one hand, and moral torpedoes who rely exclusively on their personal views without any concern for wider implications on the other. Investigating role morality as played out in public relations is important because it may explain why practitioners often find themselves at odds with their best moral judgments. Here we present five fictionalised narratives to illustrate the conceptual issues and highlight the most significant moral distinctions that have practical consequences for both the theory and practice of public relations

How Leaders Invest Staffing Resources for Learning Improvement

Analyzes staffing challenges that guide school leaders' resource decisions in the context of a learning improvement agenda, staff resource investment strategies that improve learning outcomes equitably, and ways to win support for differential investment