Alternative Forms

• Role Cardinality Activation Control Generalization

• Role Membership Limit Synonym

Definitions

Definition 1

A maximal cardinality allowed for a role at any given time.

Role Capacity refers to an upper bound limit while Role Cardinality Activation Control is less restrictive and may refer to both lower and upper bound limits.

Examples

Bob read the statuses and found that the Ethical Committee couldn’t have more than 5 members. Accordingly, he configured the capacity of the Ethical Committee role to 5 and thought: “like this, I guarantee compliance with the statuses, how smart am I!”.

Related Terms

Quotes

2.3 Role authorization

The association of a user with a role can be subject to the following:

(…)
• the numerical limitation that exists for role membership cannot be exceeded.

(…)

The third property listed above which can be preserved under the granting of user membership to roles is the Cardinality property. Some roles can only be occupied by a certain number of employees at any given period of time. For example, consider the role of Manager. Although other employees may act in that role, only one employee may assume the responsibilities of a manager at any given time. A user can become a new member of a role as long as the number of members allowed for the role is not exceeded. The number of users allowed for a role and the existing number of users associated with a role is specified by the following two functions:

membership-limit (r: roles) = the membership limit ( ≥ 0) for role “r.” (eq. 11)

number-of-members(r:roles) = N ( ≥ 0) the number of existing members in role “r.” (eq. 12)

Role capacity can now be described as:

Rule 3 (Cardinality) The capacity of a role cannot be exceeded by an additional role member:

∀ r :roles :

membership-limit(r) ≥ number-of-members(r). (eq. 13)

Bibliography

• Ferraiolo, 1995

See Also