Access Control Using Extended Role Graph Corresponding to Organizational Hierarchy

Changes should continuously occur to enterprise applications whenever organizational structure and business processes are changed. However, the application modification means that the access control modules become more complicated in order to control application users, roles for users, and permissions depending on roles of an organization. This problem was tackled traditionally with the access control mechanism. However, the Role- Based Access Control (RBAC) is recently more actively being researched as a superior mechanism. In this paper, we propose the Extended Role Graph (ERG) approach for assigning and inherit permissions to enhance the RBAC mechanism. The ERG method overcomes the limitations in the existing RBAC and provides a more solid workflow security.