The security architecture of IRO-DB

This paper describes the security architecture of the IRO-DB database federation, a system supporting interoperable access between relational and object-oriented databases. The security policy developed is a federated, administrative, discretionary access control policy supporting positive, negative, as well as implied authorizations. It includes a procedure for conflict resolution within the set of specified authorization rules, and concentrates on role-based security. Additionally, the integration of heterogeneous, local security policies of database systems joining the federation is discussed.