A Web-Based Runtime-Reconfigurable Role Management Service

Today Web-based applications are very complex and provide several hundred users with access to sensible data. Adequate access control mechanisms that prevent unauthorized access and gives policy-compliant access to users depending on their status are thus central. The online conference service (OCS) is a system of services which collectively provide all necessary workflows and functionalities an online decision support service needs. Here we describe its flexible role-based access control mechanism and introduce the embedded role management service, which is extensible, modifiable and reconfigurable online, during the service operations. We also discuss a first version of the personalized role management service as used in the OJS, the journal member of the product line initiated by the OCS