Unifying the Access Control Mechanism for the Enterprises Using XACML Policy Levels

—Many enterprises have intended to promote\udtheir applications with stern access control mechanism\udand yield the stringent authorization deployment in their\udindividual proprietary manner. The development of this\udbuild up will result in tight coupling of authorization\udmechanisms within the enterprise applications. In many\udenterprises setup, the implicit authorization processes are\udembedded within the application and promote error prone\udaccessing of requested policies. This sort of embedded\udauthorization will let the users to carry out the specific\udactions without knowing the access control policy as well\udas its embedded setup with the help of third party\udinvolvement. But this approach has some serious effects\udin controlling the issues such as skipping the trust based\udapplications, violates the policy setups and pave the way\udto exploit the authorized data to the end users. Many\udenterprises had faced serious problem in controlling its\udsensitive data from this implicit authorization decisions\udand hence decided to develop a security mechanism\udwhich can be totally controlled by centralized way of\udaccess policy. Therefore, the eXtensible Access Control\udMarkup Language (XACML) provides a very simple and\udpowerful remedy for authorization mechanism and for\udthe access policy set ups. \u