ESciDoc Authorization Requirements

Authorization requirements for resources managed by the eSciDoc

Resources to be authorized

• Content Resources
  • Item
  • Container

• Content sub-resources
• Component
• Metadata record
• Stream (new)?

How are authorization rules defined

• As XACML policies

Where are authorization policies defined

• Context

For what are authorization rules defined

• At present: core-service handler methods
• Wished: for user-defined actions (e.g. accept, send-back for revision etc.)

===How are authorization

Enhanced Scientific Documentation

eXtensible Access Control Markup Language