Q1) Slide 33 of Chapter 2 shows 6 university policies. Represent them as RBAC rules in the style of the Table of Slide 108.

SLIDE 33:

SLIDE 108:

Roles in policies . Originator-The person who issues a document Authorizer-The person who controls access over the document Custodian-The person who keeps the document and controls its use User-The person who reads and/or modifies the document Auditor-The person who checks the actions, results, and controls applied to documents. Example of university policie:s An instructor can look at all the information about the course he is teaching. An instructor can change the grades of the students in the course he is teaching A student may look at her grades in a course she is taking The department head can add/delete course offerings The registrar can add/delete students from course offerings . Faculty members can look at information about themselves Subject Access Type Object Predicate Customer read Reservation/Plan own Customer cancel Reservation own Customer close Account own TravelAgent assemble TravelPackage own customers Travel Manager assign Agent to customers Travel Manager hire/fire/promote Travel Agent read/write Customer.information AccountEmployee bill Customer