An application of role-based access control in an Organizational Software Process Knowledge Base

Abstract

The Organizational Software Process Knowledge Base (OSPKB) is the repository of an organization's software process, product performance, quality metrics, and lessons learned. The knowledge is maintained on a project-by- project basis, as well as by business domain. The OSPKB contains sensitive data and information that needs to be protected from unauthorized disclosure or modification. In this thesis, we address the challenge of controlling access to the data and information stored in the OSPKB. In particular, we investigate approaches to applying role-based access control (RBAC) to OSPKB applications.