The G-ACM Tool: using the Drools Rule Engine for Access Control Management
This work addresses access control management for system administrators, but it appears incremental as it applies an existing rule engine to a known metamodel without claiming major breakthroughs.
The authors tackled the problem of visualizing dynamic access control policies by using the Drools rule engine within a graphical framework, resulting in a tool called G-ACM that computes permissions based on the Category-Based Access Control metamodel.
In this paper we explore the usage of rule engines in a graphical framework for visualising dynamic access control policies. We use the Drools rule engine to dynamically compute permissions, following the Category-Based Access Control metamodel.