Design of an access control module for an instrumentation gateway

This paper describes some of the preliminary work performed on a resource access control module for an instrumentation gateway. The access control module employs a variation of the popular RBAC (role based access control) scheme described by various authors including Ferraiolo et al. (1999). The gateway has very little security, hence, any user able to log on to the system is able to control any resource. This module aims to implement a pluggable module whereby users are granted access to various parts of the system depending on their user rights whilst giving the administrator a very powerful method of restricting access without sacrificing ease of administration.