[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-657620-105":59,"doc-detail-657620-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","patterns-and-pattern-diagrams-for-access-control-authoritative-overview","Patterns and Pattern Diagrams for Access Control - Authoritative overview","","Access control is central to security, yet developers struggle to choose among many competing access control models. The work proposes using security patterns to clarify this landscape, organizing relationships through pattern diagrams and identifying which patterns exist versus those needing creation. Pattern maps further support semi-automatic model transformations in model-driven development (MDD). The approach helps system designers navigate a catalog, select suitable patterns, compose new models by feature addition, and define patterns by analogy.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":40,"@type":76,"position":81},"https://docshare.wps.com/document/research-report/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/patterns-and-pattern-diagrams-for-access-control-authoritative-overview/657620/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/patterns-and-pattern-diagrams-for-access-control-authoritative-overview/657620.png","ImageObject",300,407,{"name":92,"@type":93},"jay","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-30","2026-10-26",true,{"@type":102,"interactionType":103,"userInteractionCount":24},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"Why do developers find access control models confusing to choose?","Question",{"text":112,"@type":113},"There are many variations of basic access control models, and each may represent different policy types and formalizations. In practice, this confusion often leads teams to use only basic models, leaving advanced model power underused.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"What problem do pattern diagrams address in the access control model space?",{"text":117,"@type":113},"Pattern diagrams show relationships between patterns, making it easier to understand how different access control models relate. This supports navigating the pattern space when designing secure systems.",{"name":119,"@type":110,"acceptedAnswer":120},"How does the paper categorize access control approaches at a high level?",{"text":121,"@type":113},"It distinguishes Mandatory Access Control (MAC) and Discretionary Access Control (DAC), based on how rights are defined and enforced. Orthogonally, it describes models that differ in how policies are defined and enforced, including Multilevel, Access Matrix, RBAC, and ABAC.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},657620,1793142539,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":39,"category_name":40,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":24,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":52,"language":139,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":67,"update_tm":143,"read_time":144},3985747858866,"https://ap-avatar.wpscdn.com/davatar_a8503ba1806abce46bf441b54a3ca4cd","Patterns and Pattern Diagrams for Access Control  \nEduardo B. Fernandez 1 , Günther Pernul2 and Maria M. Larrondo-Petrie1  \n1 Florida Atlantic University, Boca Raton, FL 33431, USA [ed@cse.fau.edu | petrie@fau.edu](ed@cse.fau.edu | petrie@fau.edu)  \n2 University of Regensburg, Universitätsstraße 31, Regensburg, Germany [guenther.pernul@wiwi.uni-regensburg.de](guenther.pernul@wiwi.uni-regensburg.de)  \nAbstract: Access control is a fundamental aspect of security. There are many variations of the basic access control models and it is confusing for a software developer to select an appropriate model for her application. The result in practice is that only basic models are used and the power of more advanced models is thus lost. We try to clarify this panorama here through the use of patterns. In particular, we use pattern diagrams to navigate the pattern space. A pattern diagram shows relationships between patterns and we can see how different models relate to each other. A subproduct of our work is the analysis of which patterns are available for use and which need to be written. Pattern maps are also useful to perform semi-automatic model transformations as required for Model-Driven Development (MDD) . The idea is to provide the designer of a secure system with a navigation tool that she can use to select an appropriate pattern from a catalog of security patterns. We also indicate how to compose new access control models by adding features to an existing pattern and how to define patterns by analogy.  \n1 Introduction  \nThe development of secure systems requires that security be considered at all stages of design, so as to not only satisfy their functional specifications but also satisfy security requirements. Several methodologies that apply security at all stages have been proposed [1], [2], [3] . Some of these methodologies start from use cases and from them a conceptual model is developed. Security constraints are then defined in the conceptual model. To do this we need high-level models that represent the security policies that constrain applications. One of the most fundamental aspects of security is access control.  \nAlthough there are only a few basic access control models, many varieties of them have been proposed. It is confusing for a software developer to select an appropriate model for her application. Access control models generally represent a few types of security policies, e.g. “rights are assigned to roles”, and provide a formalization of these policies using some ad hoc notation. Four basic access control models are commonly used and they may be extended to include content and context-based access control, delegation of rights, hierarchical structuring of subjects (including roles), objects, or access types [4], temporal constraints, etc. Access control models can be defined for different architectural levels, including application, database systems, operating systems, and firewalls [5] . Some of them apply to any type of systems while some are specialized, e.g. for distributed systems.  \n2 Patterns and Pattern Diagrams for Access Control  \nAccess control models fall into two basic categories: Mandatory Access Control (MAC), where users’ rights are defined by administrators and data may be labeled to indicate its sensitivity, and Discretionary Access Control (DAC), where users may administer the data items they create and own. In a MAC model, users and data are classified by administrators and the system applies a set of built-in rules that users cannot circumvent. In a DAC model, there is no clear separation of use and administration; users can be owners of the data they create and act as their administrators. Orthogonal to this classification, there are several models for access control to information that differ on how they define and enforce their policies [6],[7] . The most common are:  \n• The Multilevel model organizes the data using security levels. This model is usually implemented as a mandatory model ","cbCaioF0aNBJzwzL","https://ap.wps.com/l/cbCaioF0aNBJzwzL","pdf",99089,"English","# Introduction\n# Patterns and Pattern Diagrams for Access Control\n## Mandatory vs Discretionary Access Control\n## Multilevel model\n## Access Matrix\n## Role-Based Access Control (RBAC)\n## Attribute-Based Access Control (ABAC)","[{\"question\":\"Why do developers find access control models confusing to choose?\",\"answer\":\"There are many variations of basic access control models, and each may represent different policy types and formalizations. In practice, this confusion often leads teams to use only basic models, leaving advanced model power underused.\"},{\"question\":\"What problem do pattern diagrams address in the access control model space?\",\"answer\":\"Pattern diagrams show relationships between patterns, making it easier to understand how different access control models relate. This supports navigating the pattern space when designing secure systems.\"},{\"question\":\"How does the paper categorize access control approaches at a high level?\",\"answer\":\"It distinguishes Mandatory Access Control (MAC) and Discretionary Access Control (DAC), based on how rights are defined and enforced. Orthogonally, it describes models that differ in how policies are defined and enforced, including Multilevel, Access Matrix, RBAC, and ABAC.\"}]","Patterns and Pattern Diagrams for Access Control - Authoritative overview | PDF",1792985216,25]