Putting role-based discretionary access control into practice

The discretionary access control (DAC) in a role-based system can work together with other access control policies. So it is indispensable for this DAC to deal with a role hierarchy that is predefined to enforce desired policies. Sandhu et al. use the RBAC96 model to simulate DAC but it cannot speak to a role hierarchy. Rather, their work has been of great significance in explaining the policy neutrality of the RBAC model. In this paper we present a DAC construction based on ARBAC02 that can cooperate with other policies and that meets some other requirements we suppose to be of importance.