A roles and rights language specification for a distributed e-commerce environment

This paper describes the design and specification of a roles and rights mark-up language (R2ML) that provides a role based access control policy for applications executing in a distributed e-commerce environment. The R2ML language was written using XML and a test trading application (AUTONET) was developed using the Java enterprise environment (J2EE). The aim of the test application was to implement a basic B2B application that would interact with the R2ML language to enforce secure application access control.