Skip to main content Accessibility help
×
Hostname: page-component-78c5997874-ndw9j Total loading time: 0 Render date: 2024-11-05T22:33:26.471Z Has data issue: false hasContentIssue false

7 - Authorization based on user identity or affiliation with a library: who you are? Or what you do?

Published online by Cambridge University Press:  10 September 2022

Get access

Summary

Traditionally, most authorization decisions have been based on the user's identity but in recent years a new generation access management infrastructure based on the user's role(s) within the organization has emerged. This approach offers a number of advantages, such as increased internet security and opportunities for fine-grained authorization. This chapter examines how role-based authorization works and the benefits of using this approach.

Basing access on identity, or on affiliation with a library

The traditional method of obtaining access to electronic systems and resources is based on an extremely simple authentication model: a user establishes their identity to the system (e.g. by providing a username and password pair) and that identity is processed by the system to decide what type of access to grant.

In recent years, the requirements of electronic resource access have exposed weaknesses in this model in its simplest form, and so new models have been developed to meet the needs of the internet. A brief description of some of the problems encountered in this model follows.

Identity-based authentication requires effort from the user

With a multiplicity of electronic resources all separately managing authentication and access, there is no support for single-sign-on between the resources, and the user needs to maintain many separate credentials for access. This often takes the form of needing to remember many usernames and passwords, something which leads to insecure practices (password reuse, keeping old and possibly compromised passwords in use, writing down or storing plain text copies of passwords, etc.) as a means to aid memory.

Identity alone does not give enough information to make informed access decisions

The traditional authentication model has been established for access to electronic resources since the earliest days of shared access computer systems: The Compatible Time Sharing System (CTSS), developed at the Massachusetts Institute of Technology (USA), had a LOGIN command which requested a password from the user as long ago as 1961 (Walden, 2011). Its simplicity, so far as users are concerned, is its great strength but it has a price, which is that the resource/service provider (whether Facebook or the smallest publisher website) needs to have a way of calculating the access rights for the user based on this single piece of information.

Type
Chapter
Information
Access and Identity Management for Libraries
Controlling Access to Online Information
, pp. 69 - 80
Publisher: Facet
Print publication year: 2014

Access options

Get access to the full version of this content by using one of the access options below. (Log in options will check for institutional or personal access. Content may require purchase if you do not have access.)

Save book to Kindle

To save this book to your Kindle, first ensure [email protected] is added to your Approved Personal Document E-mail List under your Personal Document Settings on the Manage Your Content and Devices page of your Amazon account. Then enter the ‘name’ part of your Kindle email address below. Find out more about saving to your Kindle.

Note you can select to save to either the @free.kindle.com or @kindle.com variations. ‘@free.kindle.com’ emails are free but can only be saved to your device when it is connected to wi-fi. ‘@kindle.com’ emails can be delivered even when you are not connected to wi-fi, but note that service fees apply.

Find out more about the Kindle Personal Document Service.

Available formats
×

Save book to Dropbox

To save content items to your account, please confirm that you agree to abide by our usage policies. If this is the first time you use this feature, you will be asked to authorise Cambridge Core to connect with your account. Find out more about saving content to Dropbox.

Available formats
×

Save book to Google Drive

To save content items to your account, please confirm that you agree to abide by our usage policies. If this is the first time you use this feature, you will be asked to authorise Cambridge Core to connect with your account. Find out more about saving content to Google Drive.

Available formats
×