Access Control Management Using Extended RBAC Model

Abstract

The protection of data in information systems against improper disclosure or modification is an important requirement of each system. Nowadays the information systems of enterprises are more and more open, more information is easy accessible for the users, so it is important to better protect the confidential information. The paper presents a software tool for managing the security of enterprise information system on the access control level from the point of view of security administrator. The security administrator who is responsible for information system security will obtain a tool that facilitate the management of one of security aspects, namely the management of access control of users to data stored in a system. However, the application developers can also use such tool to define the access control rules for application elements created on the conception level.