{ACTkit:} A Framework for the Definition and Enforcement of Role, Content and Context-based Access Control Policies

This work describes a framework, called {ACTkit}, for the definition and enforcement of dynamic access control policies on (multi-tiered) information systems. {ACTkit} embodies a language for defining security policies built out of role-, context- and content-based access control rules and an access control module responsible for the policy enforcement. A model, which has been defined as an extension of Hierarchical {RBAC} to provide a precise semantics for the security policies, is also presented and discussed.