XML Security Views Revisited

Benoit Groz (1, 2) , Slawomir Staworko (1) , Anne-Cécile Caron (1) , Yves Roos (1) , Sophie Tison (3)

1 MOSTRARE - Modeling Tree Structures, Machine Learning, and Information Extraction
2 ENS Cachan - École normale supérieure - Cachan
3 LIFL - Laboratoire d'Informatique Fondamentale de Lille

In this paper, we revisit the view based security framework for XML without imposing any of the previously considered restrictions on the class of queries, the class of DTDs, and the type of annotations used to dene the view. First, we show that the full class of Regular XPath queries is closed under query rewriting. Next, we address the problem of constructing a DTD that describes the view schema, which in general needs not be regular. We propose three dierent methods of ap- proximating the view schema and we show that the produced DTDs are indistinguishable from the exact schema (with queries from a class speci c for each method). Finally, we investigate problems of static analysis of security access specications.

Mots clés: XML; views; query rewriting; access control; regular xpath; DTD; approximation

Domaines: Base de données [cs.DB]

Benoit Groz, Slawomir Staworko, Anne-Cécile Caron, Yves Roos, Sophie Tison. XML Security Views Revisited. International Symposium on Database Programming Languages, Aug 2009, LYON, France. pp 52-67. ⟨hal-00396796⟩