An Aspect-Oriented Approach to Privacy-Aware Access Control

This paper concerns the problem of enhancing enterprise applications with a modular mechanism for enforcing privacy policies on personal data. We propose to use aspect-oriented programming and address the involved issues from the perspective of extending fine-grained access control with privacy concerns. An aspect framework for enforcing access control in Struts-based Web applications is extended with fine-grained privacy protection mechanisms that make the aspects privacy aware. The proposed mechanisms are loosely coupled with the underlying application. It is thus easy to adapt them and employ them to migrate existing applications.