Removing permissions in the flexible authorization framework Duminda Wijesekera, Sushil Jajodia, Francesco Parisi-Presicce, and Åsa Hagström   View Paper (PDF)   Return to September 2003, Volume 28, Number 3 Abstract provides a policy- neutral framework for specifying access control policies that is expressive enough to specify many known access control policies. Although the original formulation of FAF indicated how rules could be added to or deleted from a FAF specification, it did not address the removal of access permissions from users. We present two options for removing permissions in FAF and provide details on the option which is representation independent. ©2004 Association for Computing Machinery