Enforcing Security Policies for Distributed Objects Applications

In this paper we present the design and the implementation of a policy engine for enforcing security policies for distributed applica tions Such policies, represented by using the RBAC model, include both how the distributed, shared and replicated objects are used, by mean of role certi cates and how these roles are managed by means of ad ministrative roles The policy engine can enforce not only privileges to invoke methods with particular parameters and under speci c condi tions but also the permissions to execute such methods o ered as a middleware service such that application developers can con cntrate on specify the security policies for their applications and they are realesed from the burden of implementing the mechanisms for the actual enforcement of such policies