Jan Mendling, Vienna University of Economics and BA, Austria
The Business Process Execution Language for Web Services (BPEL) has become the defacto standard for Web Service composition. Yet, it does not address security aspects. This paper is concerned with access control for BPEL based processes. We present an approach to integrate Role-Based Access Control (RBAC) and BPEL on the meta-model level. Moreover, we show that such an integration can be used to automate steps of the role engineering process. In particular, we extract RBAC models from BPEL processes and present an XSLT converter that transforms BPEL code to the XML import format of the xoRBAC software component.
Citation:
Jan Mendling, Mark Strembeck, Gerald Stermsek, Gustaf Neumann, "An Approach to Extract RBAC Models from BPEL4WS Processes," wetice, pp.81-86, 13th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE'04), 2004