Type Compatibility

Accesses by processes performing a current role to objects of certain types are controlled through the Type Compatibility settings.

• getaccess$_{tn}$(p:process, o:object, a:access_type) := process p gets access to object o with access type (request type) a at time t

A process with current role r may access objects of type t with accesses of access type (request type) a, if role r is marked as Type Compatible with type t for access type a.

• compatible$_{tn}$(r:role, t:type, a:access_type) := role r is marked as compatible with type t for access type (request type) a at time n

$$\mathrm{getaccess}_{tn}(\mathrm{p,o,a}) \Rightarrow\ \mathrm... ...{tn}(\mathrm{p}),\mathrm{efftype}_{tn}(\mathrm{o}),\mathrm{a})$$ (16)

Type compatibility sets are kept separately for the different RSBAC target types.