Authorization in data management systems

Computer systems for data management are increasingly concerned with the authorization problem: the problem of creating and managing the matrix of users, objects, and allowable operations. The paper discusses the authorization problem and explains why the problem is likely to become more complex in the future. We then present the use of database normalization theory to formalize and address the authorization problem. A variety of issues related to authorization that arise in practical data management deployments are discussed. Finally, recommendations are made for further research on authorization.