Intergrating role-based access control model with web server

There is a growing threat of illegal computer access to Web-based application and security measures are now being implemented for applications that incorporate security logic in addition to business logic. This paper introduces a framework for Web security, which protects against illegal computer access to resources by granting different layers of privileges to different user roles. The role-based access control (RBAC) features are analyzed and implemented in the most recent versions of Java Application server and PointBase DB Server. RBAC features are categorized under three broad areas: user role assignment, supporting tolr relationships and credentials, and assignable privileges. These features provide a sound basis for implementing the basic features of RBAC.