INCORPORATING ACCESS CONTROL IN FORMS SYSTEMS.

Abstract

Forms systems have been considered very promising OIS paradigm. Many existing forms systems do not incorporate access control as much as it deserves since access rights on forms are expected to be more personal-oriented and value-dependent than those considered in a typical dbms application. A form definition language is proposed here that permits extensive access control specification. It provides both access authorization and some specification of enforcement rules. Some problems in the validation and enforcement processes are discussed.