Development of an Access Authorization and Control System for XML Documents

摘要

In this paper, we design and implement a system which authorizes users to XML documents and controls access to them based on access rights. We set a user group as the basic unit of authorization subjects and an element of an XML document as the basic unit of authorization objects. The owner of a document authorizes user groups to access the elements of it. When an XML document is accessed, the access rights of the requester are checked using an access control list and only the authorized part is delivered. As the result, we can authorize XML documents, which has been previously impossible.