|
A comprehensive Network configuration model is formed by combination of hierarchical and
constrained RiBAC models. However, the implications of such combination should
be precisely captured. For instance, consider role r1 has dynamic maximum
cardinality constraint of 3, and there exist role r2 which is senior to r1 (r2 . r1). In such
a configuration, if more than 3 agents activate role r2 it can be interpreted as violation
of the cardinality constraint because agents assigned to r2 can also assume r1 through
the role hierarchy. However, agents acting as role r2 may not necessarily act as role r1
all the time (only sometimes require r1_fs permissions), which makes the mentioned
interpretation too rigid.
|
