Access control in a virtual university

We present a role-based access control model that enables the management of access control policy for the courses in a virtual university. Of particular interest, the model enables the specification of a policy once for all courses, the distribution of role administration to multiple principals within restricted domains, and primitives for the expression of constraints in terms of permissions and user groups to ease specification. We provide a demonstration of the model by expressing the roles for course participants