More than skin deep

摘要: In access-control systems, policy rules conflict when they prescribe different decisions (allow or deny) for the same access. We present results of a user study that demonstrates significant impact conflict-resolution method on policy-authoring usability. our 54 participants, varying yielded statistically differences in accuracy five six tasks we tested, including rates up to 78%. Our suggest favoring smaller scope over larger is more usable than Microsoft Windows operating system's deny allow rules. Perhaps importantly, demonstrate even seemingly small changes semantics can fundamentally affect usability ways are beyond power interfaces correct.