Title :
Role Based Access Control in the ATLAS Experiment
Author :
Leahu, Marius ; Dobson, Marc ; Avolio, Giuseppe
Author_Institution :
CERN, Geneva
fDate :
April 29 2007-May 4 2007
Abstract :
The ATLAS experiment operates with a significant number of hardware and software resources. Their protection against misuse is an essential task to ensure a safe and optimal operation. To achieve this goal, the role based access control (RBAC) model has been chosen for its scalability, flexibility, ease of administration and usability from the lowest operating system level to the highest software application level. This paper presents the overall design of RBAC implementation in the ATLAS experiment and the enforcement solutions in different areas such as the system administration, control room desktops and the data acquisition software. The users and the roles are centrally managed using a directory service based on lightweight directory access protocol which is kept in synchronization with the human resources and IT databases.
Keywords :
data acquisition; high energy physics instrumentation computing; operating systems (computers); protocols; ATLAS; IT databases; control room desktops; data acquisition software; human resources; lightweight directory access protocol; operating system; role based access control; Access control; Application software; Control systems; Data acquisition; Hardware; Human resource management; Operating systems; Protection; Scalability; Usability;
Conference_Titel :
Real-Time Conference, 2007 15th IEEE-NPSS
Conference_Location :
Batavia, IL
Print_ISBN :
978-1-4244-0866-5
Electronic_ISBN :
978-1-4244-0867-2
DOI :
10.1109/RTC.2007.4382738
