<abstract xmlns="http://www.w3.org/1999/xhtml">

<p>It this paper it is proposed a new access control model – Hybrid Role and Attribute Based Access Control (HRABAC). It is an extension of Role-Based Access Control (RBAC). HRABAC is designed for information systems and enterprise software and combines the advantages of RBAC and Attribute-Based Access Control (ABAC). HRABAC is easy configurable, fine-grained and supports role hierarchies. The proposed model HRABAC describes the access control scheme in Laravel package laravelroles/rolespermissions, which is developed by the author of the paper, as an answer to the requirements of practice of fine-grained and easy configurable access control solution. Laravel is chosen, because it is the most popular and the most widely used PHP framework. The package laravelroles/rolespermissions is developed on Laravel so that maximum number of programmers could use it. This package contains working and tested functionalities for managing users, roles and permissions, and it is applied in accounting information system.</p>
</abstract>

It this paper it is proposed a new access control model – Hybrid Role and Attribute Based Access Control (HRABAC). It is an extension of Role-Based Access Control (RBAC). HRABAC is designed for information systems and enterprise software and combines the advantages of RBAC and Attribute-Based Access Control (ABAC). HRABAC is easy configurable, fine-grained and supports role hierarchies. The proposed model HRABAC describes the access control scheme in Laravel package laravelroles/rolespermissions, which is developed by the author of the paper, as an answer to the requirements of practice of fine-grained and easy configurable access control solution. Laravel is chosen, because it is the most popular and the most widely used PHP framework. The package laravelroles/rolespermissions is developed on Laravel so that maximum number of programmers could use it. This package contains working and tested functionalities for managing users, roles and permissions, and it is applied in accounting information system.

Hybrid Role and Attribute Based Access Control Applied in Information Systems

Cybernetics and Information Technologies

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

{"article-title":"Hybrid Role and Attribute Based Access Control Applied in Information Systems"}

It this paper it is proposed a new access control model – Hybrid Role and Attribute Based Access Control (HRABAC). It is an extension of Role-Based Access...

Hybrid Role and Attribute Based Access Control Applied in Information Systems

Published Online: Dec 07, 2021

Page range: 85 - 96

Received: Jan 03, 2021

Accepted: Jul 01, 2021

DOI: https://doi.org/10.2478/cait-2021-0031

Keywords
Access control, authorization, access decision, HRABAC, hybrid role and attribute access control

© 2021 Maria Penelova, published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Hybrid Role and Attribute Based Access Control Applied in Information Systems

Published Online: Dec 07, 2021

Page range: 85 - 96

Received: Jan 03, 2021

Accepted: Jul 01, 2021

DOI: https://doi.org/10.2478/cait-2021-0031

KeywordsAccess control, authorization, access decision, HRABAC, hybrid role and attribute access control

© 2021 Maria Penelova, published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Keywords
Access control, authorization, access decision, HRABAC, hybrid role and attribute access control