Access control list is a form of user authorization for users to get fine-grained access while maintaining fidelity and security.

1. Access control list
Narendra Kumar

2. Agenda
• Introduction
• Understanding access control
• Properties
• Conflict resolution
• Implementation
• Database structure
2

3. Introduction
• A set of functions that allows you to apply access
control to arbitrary objects (web pages,
databases, etc) by other arbitrary objects (users,
remote hosts, etc).
• Offers fine-grained access control with simple
management.
3

4. Understanding access controlWho/Where Cockpit Lounge Guns Engines
Han O O O O
Chewie O O O X
Obi-wan X O X X
Luke X O X X
R2-D2 X O X X
C3PO X O X X
4

5. Understanding access control
• ARO and ACO-only View(2-D):
▫ AROs: Things requesting access
▫ ACOs: Things to control access on
• ARO, ACO and AXO View(3-D):
▫ AROs: Things requesting access
▫ ACOs: Actions that are requested
▫ AXOs: Things to control access on
ARO: Access Request Object
ACO: Access Control Object
AXO: Access eXtension Object
5

6. Understanding access control
• In slide 3 table, first column is ARO while first
row is ACO in 2-D ACL.
6

7. Understanding access control
• In 3-D ACL, operations e.g. view, edit, add are
ACOs while cockpit, lounge etc are AXO
7

8. Properties
• ARO, ACO and AXO can be an object or a group
of objects.
• It is arranged hierarchically.
• An object can be part of 1 or more groups.
• Default permission is DENY ALL until explicitly
permitted.
8

9. Conflict resolution
• In case of conflict, options are:
▫ Remove the inconsistency
▫ Add priority to last added permission
▫ Add weight to groups.
9

10. Implementation
• Methods
▫ Add/Edit/Delete object
▫ Add/Edit/Delete group
▫ Add/Delete object to/from group
▫ Boolean Acl_check(aro, aco, axo)
10

11. Database structure
• Object definition table
• Object group relationship table
11

12. Thanks/Merci
12