DACA: architecture to implement dynamic access control mechanisms on business tier components

Access control is a software engineering challenge in database applications. Currently, there is no satisfactory solution to dynamically implement evolving fine-grained access control mechanisms (FGACM) on business tiers of relational database applications. To tackle this access control gap, we propose an architecture, herein referred to as Dynamic Access Control Architecture (DACA). DACA allows FGACM to be dynamically built and updated at runtime in accordance with the established fine-grained access control policies (FGACP). DACA explores and makes use of Call Level Interfaces (CLI) features to implement FGACM on business tiers. Among the features, we emphasize their performance and their multiple access modes to data residing on relational databases. The different access modes of CLI are wrapped by typed objects driven by FGACM, which are built and updated at runtime. Programmers prescind of traditional access modes of CLI and start using the ones dynamically implemented and updated. DACA comprises three main components: Policy Server (repository of metadata for FGACM), Dynamic Access Control Component (DACC) (business tier component responsible for implementing FGACM) and Policy Manager (broker between DACC and Policy Server). Unlike current approaches, DACA is not dependent on any particular access control model or on any access control policy, this way promoting its applicability to a wide range of different situations. In order to validate DACA, a solution based on Java, Java Database Connectivity (JDBC) and SQL Server was devised and implemented. Two evaluations were carried out. The first one evaluates DACA capability to implement and update FGACM dynamically, at runtime, and, the second one assesses DACA performance against a standard use of JDBC without any FGACM. The collected results show that DACA is an effective approach for implementing evolving FGACM on business tiers based on Call Level Interfaces, in this case JDBC.

The economic consequences of Portuguese State’s movement towards business sector

Over the last 36 years, the relationship with the Portuguese state-owned enterprises registered several dynamics: nationalizations, privatizations and corporatization of public services. However, until now the State Business Sector from a national accounts perspective was never analyzed. Based on data collected and compiled for the first time at Statistics Portugal, this PhD thesis aims to test, analyzing in eight dimensions, whether the weight of the State Business Sector increased and if it contributed positively to the Portuguese economy, from 2006 to 2010. In addition to this analysis, an overview of the economic theory of state intervention in the economy, the paradigm changes of public policy in the international context, the evolution of the Portuguese State Business Sector since 1974, accompanied with a business and national accounting perspective between 2006 and 2010, are also presented. The results allow us to conclude that, in general, the weight of the State Business Sector in the Portuguese economy increased and had a tendency of a positive contribution to its economic growth. The State Business Sector also contributed positively to the nominal labour productivity (although with a decreasing trend of contribution to growth over the period under review) and the profitability of the non-financial corporations sector (although impairing the overall ratio of this sector). Nonetheless, the State Business Sector contributed negatively to the fairness in compensation of employees (although with an improvement trend) and to the competitiveness of labour cost, investment and sectorial sustainability of the Portuguese economy (reinforced by a falling trend). The results also suggest that the State Business Sector had an economic behaviour closer to a welfare maximizing model than to a profit maximizing model. This distinct performance with respect to the institutional sector in which is included, highlights the need to study and reassess the relationship of the state with public corporations, in light of agency theory using micro-data. Lastly, contributions to improve the economic performance of the State Business Sector and future prospects of evolution are presented.