Dartmouth Computer Science Technical Report PCS-TR99-361
In our quest to give users uniform access to resources unimpeded by administrative boundaries, we discovered that we needed transitive sharing among users, with the possibility of restricted access along each sharing link. To achieve that goal, we extend Lampson et al.'s calculus for access control to support restricted delegations. We discuss the advantages of our extension, including the simplification of constructs like ACLs and statement expiration. We also apply our extension to model the Simple Public Key Infrastructure and make suggestions about its future development. Our extended calculus exposes some surprising consequences in such systems that use restricted delegation.
Howell, Jon and Kotz, David, "An Access-Control Calculus for Spanning Administrative Domains" (1999). Open Dartmouth: Faculty Open Access Articles. 3081.