Role Based Access Control for Web-Based Teaching Systems

A role based authorization program (RBAP) is a logic based framework which supports administrative privilege delegations for both roles and access rights. In this paper, we discuss how the application of RBAP can help in improving the security aspects of web-based teaching environments. To achieve this, various roles, objects, access rights and their delegations in such environments are defined. We also show how RBAP can be used to assist with specifying access control policies and role constraints and evaluating the appropriateness for utilization in web-based teaching environments.