a role-based xacml administration and delegation profile and its enforcement architecture
The OASIS technical committee published the XACML v3.0 administration and delegation profile (XACML-Admin) working draft on 16 April 2009 [3] in order to provide policy administration and dynamic delegation services to the XACML runtime. We enhance this profile by adding role-based delegation by amalgamating the proposed profile with the XACML-ARBAC profile proposed in [19]. By doing so, we improve the scalability of the delegation mechanism. Second, we show how XACML-ARBAC enforcement mechanism proposed in [19] can be enhanced to enforce the proposed role-based administration and delegation XACML profile (XACML-ADRBAC), therefore providing a method to enforce the XACML-Admin profile proposed in [3].
xacml administration delegation arbac authorization access control rbac web service security