【正文】
Ravi Sandhu WorldLeading Research with RealWorld Impact! 14 Institute for Cyber Security 169。 Ravi Sandhu WorldLeading Research with RealWorld Impact! 12 will not impact implicit membership o After removal from CSD, user still inherits attribute of CSD through G. will remove both explicit and implicit memberships o User will be removed from G, if removed from CSD and authorized by rules. USER GURAG Model Extensions ? Inherited Value Deletion in User ? Inherited Value Deletion in User Group 169。 Ravi Sandhu WorldLeading Research with RealWorld Impact! 10 Here the user has been assigned set of attributes by group G membership, in lieu of single attribute assignment, making attribute administration easy. ? Weak Removal versus Strong Removal ?? GURAG Model Extensions 169。 Ravi Sandhu WorldLeading Research with RealWorld Impact! 9 EXPR(UA ∪ UG) in UGA: Example UGA canAssign rules: Example UGA canRemove rules: studId: {abc12} skills: {c,java} roomAcc: {} USER GRADUATE GROUP (G) DeptAdmin (or senior) USER UGA studType: {Grad} roomAcc: {, , } userType: {student} college: {COS} univId: {12345} studId: {abc12} skills: {c,java} roomAcc: {, ,