Automated Verification Of Role-Based Access Control Policies Constraints Using Prover9

Understand

Access control policies are used to restrict access to sensitive records for authorized users only.

• One approach for specifying policies is using role based access control (RBAC) where authorization is given to roles instead of users.
• Users are assigned to roles such that each user can access all the records that are allowed to his/her role.
• RBAC has a great interest because of its flexibility.