Abstract:
In multi-user environment where users and organizational policies are chang-
ing frequently and access to di erent resources is controlled by di erent access
mechanisms such as Access Control Lists. An ACL may de ne the access of
resource to the individual user or group of users and one user may be the
part of one or more groups. ACLs are added or deleted whenever there is
a change in existing organization policy or addition or deletion of new user
or group of users. One ACL is written against one or more organizational
policies. This complex scenario leads to the ACLs con
icts. These con
icts
lead to the vulnerability in access control system. This vulnerability causes
unauthenticated access to information and resources. In our system, rstly
we proposed ACL con
ict detection and resolution algorithm, which resolve
con
icts with user interaction. Secondly, We use XACML policy speci cation
language to convert the con
ict free ACLs to XACML policy. After that our
request evaluator uses this XACML policy to response the access request.
