Dorm Access for Residential Advisers   -- For reasons of safety and security, access to student housing on the main campus of the university is tightly controlled. Dormitory doors are magnetically locked and protected with ID card readers wired to the university's "UniCard" system. Between 8am and 10pm daily, all student ID cards will open all exterior dormitory doors, but between 10pm and 8am, access is restricted to those students living in each dorm. Residential Advisers (RAs) constitute a special case, in that they require 24x7 access to multiple dorms within the residential quad in which they reside. When John encounters a family crisis and decides to take a mid-semester leave of absence, Residential Life arranges to make Richard the RA for the North Campus quad. Res Life staff identify Richard as an RA in their housing system, and based on information in the housing system regarding the location of his room on campus, a privileging system grants Richard 24x7 access not only to his own dormitory but also to the five other dormitories in his quad. When the Registrar places John on leave of absence in the registration system, the privileging system recognizes that his special access is no longer valid, and revokes his RA privileges

  1. The Policy administration point has access to housing data and student status (PIP in LDAP or Grouper).  A policy is entered which specifies that active students have access to any dorm from 8am to 10pm. 
  2. Another policy specifies that an active student has access to his/her own dorm
  3. The RA's need to be specified in the Groups system and related to dorms and dorm groups
  4. Another policy in the PAP specifies that RAs have access to their own dorm or dorms in their dorm group (e.g. quad)
  5. The UniCard system (PEP) must communicate with the privilege management system (PDP) to determine if an ID card can access a dorm at a point in time
  6. Res Life must add Richard to the applicable RA group in the PIP (Grouper)
  7. There is a rule in the PIP (e.g. Grouper) which removes RAs from the RA group either at the end of the year or if they are not active students anymore

See Also

XACML Terminology and Data Flow Diagram

  • No labels