SPL: An Access Control Language for Security Policies and Complex Constraints.

Most organizations use several security policies to control different systems and data, comprising in this way a global complex policy, which is often scattered over different environments, each one with its own security model and domain of administration.

Abstract

Most organizations use several security policies to control different systems and data, comprising in this way a global complex policy. These security policies are often scattered over different environments, each one with its own security model and domain of administration, making them difficult to administer and understand. Moreover, some applications (e.g. workflow), often need to cross several of these security domains and satisfy each one of their policies, which is very difficult to accomplish when these policies are scattered over the organization, in conflict with each other and frequently expressed in differ-