Skip to Main content Skip to Navigation
Conference papers

Towards an Access-Control Metamodel for Web Content Management Systems

Abstract : Out-of-the-box Web Content Management Systems (WCMSs) are the tool of choice for the development of millions of enterprise web sites but also the basis of many web applications that reuse WCMS for important tasks like user registration and authentication. This widespread use highlights the importance of their security, as WCMSs may manage sensitive information whose disclosure could lead to monetary and reputation losses. However, little attention has been brought to the analysis of how developers use the content protection mechanisms provided by WCMSs, in particular, Access-control (AC). Indeed, once configured, knowing if the AC policy provides the required protection is a complex task as the specificities of each WCMS need to be mastered. To tackle this problem, we propose here a metamodel tailored to the representation of WCMS AC policies, easing the analysis and manipulation tasks by abstracting from vendor-specific details.
Document type :
Conference papers
Complete list of metadata
Contributor : Salvador Martínez Connect in order to contact the contributor
Submitted on : Wednesday, October 2, 2013 - 11:50:05 PM
Last modification on : Wednesday, April 27, 2022 - 3:47:32 AM


  • HAL Id : hal-00869324, version 1


Salvador Martinez Perez, García-Alfaro Joaquin, Cuppens Frédéric, Nora Cuppens-Boulahia, Jordi Cabot. Towards an Access-Control Metamodel for Web Content Management Systems. ICWE 2013: the International Conference on Web Engineering - MDWE 2013: Model-Driven Web Engineering, Jul 2013, Aalborg, Denmark. pp 148-155. ⟨hal-00869324⟩



Record views