ls3-www.cs.tu-dortmund.de/cms/medien/publikationen/sacmat2001.pdf
Modular Authorization
Definition 4 (group relation) The binary predicate
groupin(g1, g2)
holds if g1, g2 ∈ GT and g1 < g2 according to the group hierarchy or if g1 and g2 are identical.
As authorization spheres are interpreted [...] (object membership) The binary predicate
in(o1, o2)
holds if object o1 ∈ OT contains o2 ∈ OT .
Definition 9 (direct object membership)
dirin(o1, o2)
holds, if o1 ∈ OT is parent of object o2 ∈ OT
In the Dragon [...] following feature predicate.
Definition 2 (role relation) The binary predicate
rolein(r1, r2)
holds if r1, r2 ∈ RT and r1 ∝ r2 according to the role hier- archy.
Every object as well as each assigned role …