Toward a Multi-Tenancy Authorization System for Cloud Services

This article describes an authorization model suitable for cloud computing that supports hierarchical rolebased access control, path-based object hierarchies, and federation. The authors also present an authorization system architecture for implementing the model.