System for privacy policy enforcement & access control for web applications

The paper aims at providing practical implementation details of a system for privacy policy enforcement and role based access control of data. The implementation is inspired by the lack of privacy policy enforcement in present application systems. Till now access control has been achieved by coding the required access policies in the application layer or by defining specific roles. This leaves less scope for scalability of the system when the need arises. We attempt to provide privacy aware access control framework that end developers can use for developing their applications. This system will be responsible for automatically implementing the policy enforcement. The developers can then freely utilize the functionality of our system to only focus upon writing their applications.