Authorization Algorithms for Permission-Role Assignments

Permission-role assignments (pra) is one important process in role-based access control (rbac) which has been proven to be a flexible and useful access model for information sharing in distributed collaborative environments. however, problems may arise during the procedures of pra. conflicting permissions may assign to one role, and as a result, the role with the permissions can derive unexpected access capabilities. this paper aims to analyze the problems during the procedures of permission-role assignments in distributed collaborative environments and to develop authorization allocation algorithms to address the problems within permission-role assignments. the algorithms are extended to the case of pra with the mobility of permission-role relationship. finally, comparisons with otherrelated work are discussed to demonstrate the effective work of the paper.