While I was at Victoria Uni last year I had the opportunity to complete some Computer Science research, my chosen field of study was Role-Based Access Control in a Commercial environment. My overall conclusion was that RBAC is a sensible method of ensuring accurace access control, however for various reasons RBAC is under-implemented in today's commercial environment. It is perhaps ironic that now I am developing an application which requires detailed access control, and I have chosen to instead use access groups, a method which might be refered to as "RBAC-lite"
I was a part of the DSRG, a group dedicated to research in distributed systems and some of their issues. The DSRG is headed by John Hine and contains some of the finest minds in the Victoria Computer Science Department.
And now for your reading pleasure, my final report! available here: Final Report.pdf (requires Adobe Acrobat, fairly large download)
