Review - An Authorization Mechanism for a Relational Data Base System.

Elisa Bertino: Review - An Authorization Mechanism for a Relational Data Base System. ACM SIGMOD Digital Review 1: (1999) BibTeX

Review

It has been very easy for me to indicate a paper that has greatly influenced my research. This paper is the one by Pat Griffiths and Bob Wade on the System R authorization model. The reason why I liked this paper, when I first read it, is that it addresses a real, important problem - the problem of access control in database systems - and at the same time it provides a nice, theoretical foundation for reasoning about access control models and mechanisms. The approach described in that paper has been the basis of access control mechanisms of several commercial DBMS. When, years later, I decided to do some research work on database access control mechanisms, I used the approach proposed by Pat and Bob in that paper as the starting point of my research. I and some colleagues of mine have now developed several extensions to the access control model originally proposed for System R, including non-recursive revoke operations, negative authorizations, temporal authorizations. Last but not least, the paper also provides a nice guideline for teaching students about access control mechanisms in relational DBMS.

References

[1]: Patricia P. Griffiths, Bradford W. Wade: An Authorization Mechanism for a Relational Data Base System (Abstract). SIGMOD Conference 1976: 51 BibTeX
[2]: Patricia P. Griffiths, Bradford W. Wade: An Authorization Mechanism for a Relational Database System. ACM Trans. Database Syst. 1(3): 242-255(1976) BibTeX

BibTeX

Digital Review - DBLP: [Home | Search: Author, Title | Conferences | Journals]