HAL will be down for maintenance from Friday, June 10 at 4pm through Monday, June 13 at 9am. More information
Skip to Main content Skip to Navigation
Conference papers

The Case for Access Control on XML Relationships

Béatrice Finance 1 Saïda Medjdoub 1 Philippe Pucheral 1
1 SMIS - Secured and Mobile Information Systems
PRISM - Parallélisme, Réseaux, Systèmes, Modélisation, UVSQ - Université de Versailles Saint-Quentin-en-Yvelines, Inria Paris-Rocquencourt, CNRS - Centre National de la Recherche Scientifique : UMR8144
Abstract : With the emergence of XML as the de facto standard to exchange and disseminate information, the problem of regulating access to XML documents has attracted a considerable attention in recent years. Existing models attach authorizations to nodes of an XML document but disregard relationships between them. However, ancestor and sibling relationships may reveal information as sensitive as the one carried out by the nodes themselves (e.g., classification). This paper advocates the integration of relationships as first class citizen in the access control models for XML and makes the following contributions. First, it characterizes important relationship authorizations and identifies the mechanisms required to translate them accurately in an authorized view of a source document. Second, it introduces a rule-based formulation for expressing these classes of relationship authorizations and defines an associated conflict resolution strategy. Rather than being yet-another XML access control model, the proposed approach allows a seamless integration of relationship authorizations in existing XML access control model.
Document type :
Conference papers
Complete list of metadata

Cited literature [16 references]  Display  Hide  Download

Contributor : Luc Bouganim Connect in order to contact the contributor
Submitted on : Friday, May 5, 2006 - 12:57:31 PM
Last modification on : Wednesday, April 6, 2022 - 3:48:16 PM
Long-term archiving on: : Saturday, April 3, 2010 - 11:18:39 PM


  • HAL Id : inria-00001282, version 1



Béatrice Finance, Saïda Medjdoub, Philippe Pucheral. The Case for Access Control on XML Relationships. International Conference on Knowledge Management (CIKM), Nov 2005, Bremen, Germany. ⟨inria-00001282⟩



Record views


Files downloads