Abstract:

To overcome the insufficiency of object level in access control mechanism, the access control mechanism of object level is integrated in the taskrolebased access control.This mechanism takes into account the effects of object status changes for user access permissions. Granularity of access control is accurate to express individual object status.When designing the access control mechanism,the access rules under different conditions separates from the access management structure. By this way, the accesscontrol mechanism can be used in different workflow processes.Objectoriented design patterns are used in the system design. Finally,the mechanism is applied onto the online authoring and publishing system of a multimedia digital museum to assure that the digital content is correct and appropriate.

Key words: object status;workflow;role;access control