Access Control Model for an Electronic Master Plan Maintenance Web-based GIS
O. I. Zhukovsky
Department of Data Processing Automation, Tomsk State University of Control Systems and Radioelectronics, 40 Lenina Prospect, Tomsk, Russian Federation
Yu. B. Gritsenko
Department of Data Processing Automation, Tomsk State University of Control Systems and Radioelectronics, 40 Lenina Prospect, Tomsk, Russian Federation.
P. V. Senchenko
Department of Data Processing Automation, Tomsk State University of Control Systems and Radioelectronics, 40 Lenina Prospect, Tomsk, Russian Federation
M. M. Milikhin *
Department of Data Processing Automation, Tomsk State University of Control Systems and Radioelectronics, 40 Lenina Prospect, Tomsk, Russian Federation.
*Author to whom correspondence should be addressed.
Abstract
Aims: The article is dedicated to give an assessment of the applicability of the popular access control models for designing the information security subsystem of an electronic master plan (EMP) web-based geographic information system. An overview of access control models used for designing and creation of modern information systems is given. The article also contains main features of information security system implementation based on given access control models.
Conclusion: The use of role-based access control model as a basis of information security subsystem of the enterprise geographic information system (GIS) can simplify the designing and administration of the given system. Such model corresponds well to the companies with complex organizational and staff structure and provides an opportunity to simulate real enterprise structure with hundreds of employees working simultaneously with different aspects of master plan. The presented implementation of the role-based access control model allowed authors to develop GIS which supports assignment of access permissions to groups of users on each kind of master plan objects, including different map areas, layers and GIS functionality.
Keywords: Electronic master plan, geographic information system, access control model