作者: Gary L. Luckenbaugh , Forrest E. Stoakes
DOI:
关键词: World Wide Web 、 Hypertext 、 Credential 、 Computer science 、 Session (computer science) 、 Mandatory access control 、 User interface 、 Password 、 Security policy 、 Web page
摘要: Arbitrarily fine-grained limitation of access to information stored in a resource data processor network is provided manner compatible with existing browsers by mapping user identity and credentials randomly assigned security cookie which thus serves as surrogate credential accompanying each request during session. Labels are imbedded within HTML files/text may embody any desired policy, including mandatory control (MAC) arrangements not available through native browser functions. Data retrieved response includes from location the directly accessible use URL; being configuration file hidden users. The then filtered accordance labels for page and/or embedded text used build include hypertext links or other interfaces transmission user. Provision made viewing changing labels, passwords.