Authorization
by
Benedikt Liegener
—
last modified
Apr 27, 2012 10:41
—
filed under:
QualityAttribute,
KnowledgeModel
Definitions
Term: Authorization |
Domain: Cross-cutting issues | ||||
---|---|---|---|---|---|
Engineering and Design (KM-ED) |
Adaptation and Monitoring (KM-AM) |
Quality Definition, Negotiation and
Assurance (KM-QA) |
Generic (domain independent) |
||
D o m a i n : L a y e r s |
Business Process Management (KM-BPM) |
||||
Service Composition and
Coordination (KM-SC) |
|||||
Service Infrastructure (KM-SI) |
|||||
Generic (domain independent) |
The process of determining, by evaluating applicable
access control information, whether a subject is allowed to have the
specified types of access to a particular resource like a service.
Usually, authorization is in the context of authentication. Once a
subject is authenticated, it may be authorized to perform different
types of access. [CD-JRA-1.3.2] {GEN: Security} |
Note: The definition stated for this term is taken from the S-Cube Quality Reference Model, which was intended to provide S-Cube members with a unified terminology for describing quality attributes of service-based applications (see deliverable CD-JRA-1.3.2).
Competencies
- UCBL: Authorisation policies; http://liris.cnrs.fr/bd/;
Salima Benbernou, Emmanuel Coquery, Paul El Khoury, Mohand Said-Hacid,
Maziane Hasssina, Karima Mokhtari
References
- [CD-JRA-1.3.2] "Quality reference model for service-based applications"