1 / 16

Aspect-Oriented Modeling of Access Control in Web Applications

UML-BASED WEB ENGINEERING. Aspect-Oriented Modeling of Access Control in Web Applications. Gefei Zhang Joint work with Hubert Baumeister, Nora Koch and Alexander Knapp. Ludwig-Maximilians-Universität M ünchen , Germany WAOM 2005 , Chicago. Motivation & Goal.

chiara
Télécharger la présentation

Aspect-Oriented Modeling of Access Control in Web Applications

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. UML-BASED WEB ENGINEERING Aspect-Oriented Modeling of Access Control in Web Applications Gefei ZhangJoint work withHubert Baumeister, Nora Koch and Alexander Knapp Ludwig-Maximilians-Universität München, Germany WAOM 2005, Chicago

  2. Motivation & Goal Access control in Web applications: In current Web engineering methods: entangled with navigation design redundant modeling We propose: viewing access control as a cross-cutting concern using aspects for better modularization Extension of UML-based Web Engineering (UWE)1 by aspect-oriented modeling of access control 1UML’00, IWWOST’01-03, ICWE’03, UML’04

  3. Content UWE overview Example of modeling access control Aspect orientation Conclusions and future work

  4. UWE Approach: Overview Common language for data interchange is a conservative extension of the UML metamodel • An approach for the development of Web applications • Based on UML and the Unified Process UWE metamodel • Supports requirement elicitation, content, navigation, business process, and presentation modeling

  5. UWE Metamodel: Navigation inv: self.oclAsType(ModelElement).behavior.size() = 1 Structure Association (Foundation Core) Class (Foundation Core) +source Link NavigationNode +outLinks 1 * {derived} +target +inLinks 1 * Behavior NavigationNode StateMachine context {derived} behavior 0..1 * Default State Machine

  6. Example: Online Library • Indexes & Menu: public • Journals, Books and Papers: for registered users only

  7. Example: Access Control (Naïve)

  8. Modularization with Aspects: Syntax Pointcut Advice

  9. Modularization with Aspects: Weaving State Machine of Aspect State Machine of Classes Resulting State Machine

  10. Modularization with Aspects: Metamodel inv: self.oclAsType(ModelElement).behavior.size() = 1 Structure Behavior Aspect StateMachine context behavior {derived} 0..1 *

  11. Aspects of Aspects Pointcut State Machine of AccessControl State Machine of Limit

  12. Summary • Conclusions • modularized modeling • using aspect-oriented state machines • weaving result: substates • metamodel extension • Future Work • formal semantics • tool support • aspect-oriented UML (AO class diagrams for modeling user adaptivity summitted to ICWE’05)

  13. Thanks for your attention!! Questions & Answers We appreciate your feedback ... uwe@pst.ifi.lmu.de

  14. Example: Access Control (Book)

  15. Example: Access Control (Paper)

  16. UWE Metamodel: The Big Picture UML 1.5 UWE Model Behavioral Elements Model Behavioral Management Management Elements Adaptation Process Foundation Core Navigation Presentation Conceptual Process Context Environment User Foundation

More Related