In organizations, employees work with information stored in files according to their duties and responsibilities. Windows uses resource-based access permissions that any permission for user has be set separately per resource. This approach gets complicated as the number of resources users increase, causes oversights assigning permissions. Therefore, a special mechanism is required scrutinize wh...

Access control administration regulates and enforces the definition of the components of an access control system by authorized administrative users. In this paper, the limitations on administrative aspects of well-known security models are addressed and the requirements for efficient management of authorizations are investigated in order to provide fine-grained and just-in-time access control ...

Role-based mechanisms usually provide a sufficient way to establish access control in most information systems. Passive security permission assignment cannot however support efficiently the dynamic aspects of many modern information systems. Health Care information systems provide a good example of such an environment. In dynamically changing clinical workflow environments there is a need for a...