Reachability Analysis for Attributes in ABAC With Group Hierarchy

Attribute-based access control (ABAC) models are widely used to provide fine-grained and adaptable authorization based on the attributes of users, resources, other relevant entities. Hierarchical group attribute (HGABAC) model was recently proposed which introduces novel notion inheritance through membership. GURA G subsequently an administrative for user in HGABAC, building upon ARBAC97 models. The uses roles manage attributes. reachability problem is determine what a particular can acquire, given predefined set rules. This has been previously analyzed literature. In this article, we study directly assigned inherited via memberships. We first define restricted form , called rGURA scheme, as state transition system with multiple instances having different preconditions analysis each these schemes. general, show PSPACE-complete complexity all further present polynomial time algorithms empirical experimental evaluation solve special schemes under conditions.