| 摘要 |
Access to a resource is controlled by changing a query to an access request on the basis of first information pertaining to a request for access to a resource, the first information including a first subject attribute pertaining to an access requester, a first object attribute pertaining to a resource the access to which is requested, and a first action attribute pertaining to a resource manipulation, and a first access control policy that defines rules for controlling access to a resource. The access is controlled by changing a response query to the query on the basis of second information pertaining to the access request, the second information including a second subject attribute pertaining to the access requester, a second object attribute pertaining to the resource the access to which is requested, and a second action attribute pertaining to a resource manipulation, and a second access control policy that defines rules on access control. |
