Abstract: RB-RBAC（Rule-Based RBAC）provides the mechanism to dynamically assign users to roles based on a finite set of authorization rules defined by the enterprisers security policy. These rules may have conflict due to negative authorization. We propose a formali

Key words: RB-RBAC, Description logic, Authorization rule, Policy conflict, Conflict detection