{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T16:21:27Z","timestamp":1743006087501,"version":"3.40.3"},"publisher-location":"Berlin, Heidelberg","reference-count":30,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642030123"},{"type":"electronic","value":"9783642030130"}],"license":[{"start":{"date-parts":[[2009,1,1]],"date-time":"2009-01-01T00:00:00Z","timestamp":1230768000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009]]},"DOI":"10.1007\/978-3-642-03013-0_9","type":"book-chapter","created":{"date-parts":[[2009,7,30]],"date-time":"2009-07-30T10:30:01Z","timestamp":1248949801000},"page":"173-194","source":"Crossref","is-referenced-by-count":19,"title":["Fine-Grained Access Control with Object-Sensitive Roles"],"prefix":"10.1007","author":[{"given":"Jeffrey","family":"Fischer","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daniel","family":"Marino","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rupak","family":"Majumdar","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Todd","family":"Millstein","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"9_CR1","first-page":"233","volume-title":"Formal Aspects in Security and Trust","author":"A.E. Abdallah","year":"2004","unstructured":"Abdallah, A.E., Khayat, E.J.: A formal model for parameterized role-based access control. In: Dimitrakos, T., Martinelli, F. (eds.) Formal Aspects in Security and Trust, pp. 233\u2013246. Springer, Heidelberg (2004)"},{"key":"9_CR2","doi-asserted-by":"publisher","first-page":"57","DOI":"10.1145\/1167473.1167479","volume-title":"OOPSLA 2006: Proceedings of the 21st annual ACM SIGPLAN Conference on Object-Oriented Programming Systems, Languages, and Applications","author":"C. Andreae","year":"2006","unstructured":"Andreae, C., Noble, J., Markstrum, S., Millstein, T.: A framework for implementing pluggable type systems. In: OOPSLA 2006: Proceedings of the 21st annual ACM SIGPLAN Conference on Object-Oriented Programming Systems, Languages, and Applications, pp. 57\u201374. ACM Press, New York (2006)"},{"key":"9_CR3","doi-asserted-by":"publisher","first-page":"55","DOI":"10.1145\/319171.319177","volume-title":"RBAC 1999: Proceedings of the fourth ACM workshop on Role-based access control","author":"J. Barkley","year":"1999","unstructured":"Barkley, J., Beznosov, K., Uppal, J.: Supporting relationships in access control using role based access control. In: RBAC 1999: Proceedings of the fourth ACM workshop on Role-based access control, pp. 55\u201365. ACM, New York (1999)"},{"key":"9_CR4","first-page":"279","volume-title":"CSF 2007","author":"A. Barth","year":"2007","unstructured":"Barth, A., Mitchell, J., Datta, A., Sundaram, S.: Privacy and utility in business processes. In: CSF 2007, pp. 279\u2013294. IEEE Computer Society Press, Los Alamitos (2007)"},{"key":"9_CR5","doi-asserted-by":"crossref","unstructured":"Becker, M.: Information governance in nhs\u2019s npfit: A case for policy specification. International Journal of Medical Informatics (IJMI)\u00a076(5-6) (2007)","DOI":"10.1016\/j.ijmedinf.2006.09.008"},{"key":"9_CR6","doi-asserted-by":"crossref","unstructured":"Becker, M., Sewell, P.: Cassandra: Distributed access control policies with tunable expressiveness. In: POLICY 2004, pp. 159\u2013168 (2004)","DOI":"10.1109\/POLICY.2004.1309162"},{"key":"9_CR7","doi-asserted-by":"publisher","first-page":"48","DOI":"10.1145\/286936.286947","volume-title":"Proceedings of the 13th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications","author":"D.G. Clarke","year":"1998","unstructured":"Clarke, D.G., Potter, J.M., Noble, J.: Ownership types for flexible alias protection. In: Proceedings of the 13th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications, pp. 48\u201364. ACM Press, New York (1998)"},{"key":"9_CR8","unstructured":"eXtensible Access Control Markup Language (XACML) Version 2.03. OASIS Standard (February 2005)"},{"key":"9_CR9","unstructured":"Ferraiolo, D., Kuhn, R.: Role-based access control. In: 15th National Computer Security Conference (1992)"},{"key":"9_CR10","doi-asserted-by":"crossref","unstructured":"Fischer, J., Marino, D., Majumdar, R., Millstein, T.: Fine-grained access control with object-sensitive roles. Technical Report CSD-TR-090010, UCLA Comp. Sci. Dept. (2009)","DOI":"10.1007\/978-3-642-03013-0_9"},{"key":"9_CR11","doi-asserted-by":"publisher","first-page":"28","DOI":"10.1145\/319838.319848","volume-title":"LFP 1986: Proceedings of the 1986 ACM Conference on LISP and Functional Programming","author":"D.K. Gifford","year":"1986","unstructured":"Gifford, D.K., Lucassen, J.M.: Integrating functional and imperative programming. In: LFP 1986: Proceedings of the 1986 ACM Conference on LISP and Functional Programming, pp. 28\u201338. ACM Press, New York (1986)"},{"key":"9_CR12","first-page":"153","volume-title":"RBAC 1997: Proceedings of the second ACM workshop on Role-based access control","author":"L. Giuri","year":"1997","unstructured":"Giuri, L., Iglio, P.: Role templates for content-based access control. In: RBAC 1997: Proceedings of the second ACM workshop on Role-based access control, pp. 153\u2013159. ACM Press, New York (1997)"},{"key":"9_CR13","unstructured":"Hibernate home page, http:\/\/www.hibernate.org"},{"issue":"3","key":"9_CR14","doi-asserted-by":"publisher","first-page":"396","DOI":"10.1145\/503502.503505","volume":"23","author":"A. Igarashi","year":"2001","unstructured":"Igarashi, A., Pierce, B.C., Wadler, P.: Featherweight Java: a minimal core calculus for Java and GJ. ACM Transactions on Programming Languages and Systems\u00a023(3), 396\u2013450 (2001)","journal-title":"ACM Transactions on Programming Languages and Systems"},{"key":"9_CR15","first-page":"135","volume-title":"WETICE 1999: Proceedings of the 8th Workshop on Enabling Technologies on Infrastructure for Collaborative Enterprises","author":"T. Jaeger","year":"1999","unstructured":"Jaeger, T., Michailidis, T., Rada, R.: Access control in a virtual university. In: WETICE 1999: Proceedings of the 8th Workshop on Enabling Technologies on Infrastructure for Collaborative Enterprises, Washington, DC, USA, pp. 135\u2013140. IEEE Computer Society Press, Los Alamitos (1999)"},{"key":"9_CR16","unstructured":"Java Platform, Enterprise Edition home page, http:\/\/java.sun.com\/javaee"},{"key":"9_CR17","unstructured":"Markstrum, S., Marino, D., Esquivel, M., Millstein, T.: Practical enforcement and testing of pluggable type systems. Technical Report CSD-TR-080013, UCLA Comp. Sci. Dept. (2008)"},{"key":"9_CR18","doi-asserted-by":"publisher","first-page":"153","DOI":"10.1016\/S0049-237X(09)70189-2","volume-title":"Sixth International Congress for Logic, Methodology, and Philosophy of Science","author":"P. Martin-L\u00f6f","year":"1982","unstructured":"Martin-L\u00f6f, P.: Constructive mathematics and computer programming. In: Sixth International Congress for Logic, Methodology, and Philosophy of Science, pp. 153\u2013175. North-Holland, Amsterdam (1982)"},{"key":"9_CR19","doi-asserted-by":"publisher","first-page":"457","DOI":"10.1145\/1449764.1449800","volume-title":"OOPSLA 2008: Proceedings of the 23rd ACM SIGPLAN Conference on Object Oriented Programming Systems Languages and Applications","author":"N. Nystrom","year":"2008","unstructured":"Nystrom, N., Saraswat, V., Palsberg, J., Grothoff, C.: Constrained types for object-oriented languages. In: OOPSLA 2008: Proceedings of the 23rd ACM SIGPLAN Conference on Object Oriented Programming Systems Languages and Applications, pp. 457\u2013474. ACM Press, New York (2008)"},{"key":"9_CR20","doi-asserted-by":"publisher","first-page":"289","DOI":"10.1145\/1455770.1455808","volume-title":"CCS 2008: Proceedings of the 15th ACM conference on Computer and communications security","author":"L. Olson","year":"2008","unstructured":"Olson, L., Gunter, C., Madhusudan, P.: A formal framework for reflective database access control policies. In: CCS 2008: Proceedings of the 15th ACM conference on Computer and communications security, pp. 289\u2013298. ACM Press, New York (2008)"},{"key":"9_CR21","unstructured":"OpenMRS home page, http:\/\/openmrs.org"},{"key":"9_CR22","unstructured":"Oracle 11g Virtual Private Database (2009), http:\/\/www.oracle.com\/technology\/deploy\/security\/database-security\/virtual-private-database\/index.html"},{"key":"9_CR23","series-title":"Lecture Notes in Computer Science","first-page":"668","volume-title":"ECOOP \u201999 - Object-Oriented Programming","author":"R. Pandey","year":"1999","unstructured":"Pandey, R., Hashii, B.: Providing fine-grained access control for Java programs. In: Guerraoui, R. (ed.) ECOOP 1999. LNCS, vol.\u00a01628, pp. 668\u2013692. Springer, Heidelberg (1999)"},{"key":"9_CR24","volume-title":"Types and Programming Languages","author":"B.C. Pierce","year":"2002","unstructured":"Pierce, B.C.: Types and Programming Languages. The MIT Press, Cambridge (2002)"},{"key":"9_CR25","first-page":"478","volume-title":"ICSE 2007","author":"M. Pistoia","year":"2007","unstructured":"Pistoia, M., Fink, S., Flynn, R., Yahav, E.: When role models have flaws: Static validation of enterprise security policies. In: ICSE 2007, pp. 478\u2013488. IEEE, Los Alamitos (2007)"},{"key":"9_CR26","doi-asserted-by":"crossref","first-page":"551","DOI":"10.1145\/1007568.1007631","volume-title":"SIGMOD 2004: Proceedings of the 2004 ACM SIGMOD international conference on Management of data","author":"S. Rizvi","year":"2004","unstructured":"Rizvi, S., Mendelzon, A., Sudarshan, S., Roy, P.: Extending query rewriting techniques for fine-grained access control. In: SIGMOD 2004: Proceedings of the 2004 ACM SIGMOD international conference on Management of data, pp. 551\u2013562. ACM Press, New York (2004)"},{"issue":"2","key":"9_CR27","doi-asserted-by":"publisher","first-page":"38","DOI":"10.1109\/2.485845","volume":"29","author":"R. Sandhu","year":"1996","unstructured":"Sandhu, R., Coyne, E., Feinstein, H., Youman, C.: Role-based access control models. IEEE Computer\u00a029(2), 38\u201347 (1996)","journal-title":"IEEE Computer"},{"key":"9_CR28","unstructured":"Spring Application Framework home page, http:\/\/www.springsource.org"},{"issue":"4","key":"9_CR29","doi-asserted-by":"publisher","first-page":"701","DOI":"10.1145\/363911.363923","volume":"22","author":"D. Walker","year":"2000","unstructured":"Walker, D., Crary, K., Morrisett, G.: Typed memory management via static capabilities. ACM Trans. Program. Lang. Syst.\u00a022(4), 701\u2013771 (2000)","journal-title":"ACM Trans. Program. Lang. Syst."},{"issue":"1","key":"9_CR30","doi-asserted-by":"publisher","first-page":"38","DOI":"10.1006\/inco.1994.1093","volume":"115","author":"A.K. Wright","year":"1994","unstructured":"Wright, A.K., Felleisen, M.: A syntactic approach to type soundness. Information and Computation\u00a0115(1), 38\u201394 (1994)","journal-title":"Information and Computation"}],"container-title":["Lecture Notes in Computer Science","ECOOP 2009 \u2013 Object-Oriented Programming"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-03013-0_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,21]],"date-time":"2019-05-21T15:52:12Z","timestamp":1558453932000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-03013-0_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009]]},"ISBN":["9783642030123","9783642030130"],"references-count":30,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-03013-0_9","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2009]]}}}