Organization of user access rights management systems in educational information systems

Abstract

У тезах розглянуто теоретичні та практичні аспекти організації системи розмежування прав доступу користувачів в освітніх інформаційних системах. Проаналізовано основні моделі контролю доступу (DAC, MAC,The research paper examines theoretical and practical aspects of organizing user access rights management systems in educational information systems. The main access control models (DAC, MAC, RBAC, ABAC) are analyzed, and their advantages and limitations in the context of educational platforms are identified. Based on the developed requirements for a student learning materials exchange platform, the specifics of the role model for three user classes are studied: student, instructor, and administrator. The selection of a hybrid RBAC+ABAC model as optimal for systems with dynamic content and social interaction is justified. Key security threats are identified and technical solutions are proposed to address them.