Secure Web-based applications with XML and RBAC

A role-based access control model for Web-based applications (ORBAC) is introduced. Also, an efficient method for managing ORBAC security policies using XML and a role assignment algorithm are presented. Unlike most existing approaches, with our approach the authorization is independently defined and is separated from implementation mechanisms.