ENHANCED RBAC DENGAN PENDEKATAN HIERARCHICAL DAN DOCUMENT LIFECYCLE PADA SISTEM MANAJEMEN DOKUMEN

Wildan Jazuli; Zaenuddin Zaenuddin; Mochamad Budi Susanto

doi:10.64626/jukomtek.v5i2.674

Penulis

Wildan Jazuli Universitas Mitra Bangsa
Zaenuddin Zaenuddin Universitas Mitra Bangsa
Mochamad Budi Susanto Universitas Mitra Bangsa

DOI:

https://doi.org/10.64626/jukomtek.v5i2.674

Kata Kunci:

RBAC, Hierarchical RBAC, Document Lifecycle, System Security, DMS

Abstrak

Access rights management in Document Management Systems (DMS) has become a critical challenge in organizations with complex and dynamic structures. Conventional Role-Based Access Control (RBAC) models have limitations in addressing access requirements that consider organizational hierarchy and changes in document status throughout its lifecycle. This study proposes an Enhanced RBAC model by integrating hierarchical roles and document lifecycle as a more adaptive and context-aware access control mechanism. The research method employs a prototyping approach with iterative development, along with quantitative evaluation through access scenario testing, performance measurement, and business process efficiency analysis. The evaluation is conducted using multiple scenarios representing various combinations of roles, hierarchical structures, and document states. The results indicate that the proposed model is able to reduce unauthorized access across all testing scenarios, improve approval process efficiency by 35%, and minimize access errors during testing. The main contribution of this study lies in the integration of hierarchical organizational structures and document states into the RBAC model, resulting in a more flexible, adaptive, and effective access control mechanism that meets the requirements of modern document management systems.

Referensi

An, Y., & Helil, N. (2023). Authorization Recycling in Attribute-Based Access Control. Wireless Communications and Mobile Computing, 2023. https://doi.org/10.1155/2023/4644778

Anderer, S., Kempter, T., Scheuermann, B., & Mostaghim, S. (2023). Dynamic Optimization of Role Concepts for Role-Based Access Control Using Evolutionary Algorithms. SN Computer Science. https://doi.org/10.1007/s42979-023-01805-1

Anggraini, D., Adi, K., & Suseno, J. E. (2024). Electronic document management systems implementation across industries: systematic analysis. Indonesian Journal of Electrical Engineering and Computer Science, 36(1), 264. https://doi.org/10.11591/ijeecs.v36.i1.pp264-273

Bumalod, M. C., & Velasco, R. M. A. (2024). Synergistic Information Security Design Implementation based on Role-Based Access Control, Information Classification, and AES Cryptographic Encryption. International Journal in Information Technology in Governance, Education and Business, 6(1), 68–85. https://doi.org/10.32664/ijitgeb.v6i1.136

Destini, J. S., & Tony, T. (2024). Implementing Hierarchical Role-Based Access Control for Document Administration in Student Organizations. Internet of Things and Artificial Intelligence Journal, 4(4), 785–802. https://doi.org/10.31763/iota.v4i4.832

Glöckler, J., Sedlmeir, J., Frank, M., & Fridgen, G. (2024). A Systematic Review of Identity and Access Management Requirements in Enterprises and Potential Contributions of Self-Sovereign Identity. Business and Information Systems Engineering. https://doi.org/10.1007/s12599-023-00830-x

Jordan, S., Zabukovšek, S. S., & Klančnik, I. Š. (2022). Document Management System – A Way to Digital Transformation. Naše Gospodarstvo/Our Economy. https://doi.org/10.2478/ngoe-2022-0010

Li, K., & Min, B.-W. (2023). Improvement of Permission Management System Based on RBAC(Role-Based Access Control) Model. International JOURNAL OF CONTENTS. https://doi.org/10.5392/ijoc.2023.19.4.086

M Sahyudi, & Erliyan Redy Susanto. (2025). Analisis Implementasi Sistem Keamanan Basis Data Berbasis Role-Based Access Control (RBAC) pada Aplikasi Enterprise Resource Planning. SATESI: Jurnal Sains Teknologi Dan Sistem Informasi. https://doi.org/10.54259/satesi.v5i1.3997

Mohamed, A. K. Y. S., Auer, D., Hofer, D., & Küng, J. (2024). A systematic literature review of authorization and access control requirements and current state of the art for different database models. International Journal of Web Information Systems, 20(1), 1–23. https://doi.org/10.1108/IJWIS-04-2023-0072

Mpamugo, E., & Ansa, G. (2024). Enhancing Network Security in Mobile Applications with Role-Based Access Control. Journal of Information Systems and Informatics, 6(3), 1872–1899. https://doi.org/10.51519/journalisi.v6i3.863

Nasich, A. K., Wicaksono, S. A., & Saputra, M. C. (2025). Implementasi Role Based Access Control (RBAC) dalam Sistem Informasi Manajemen Pelanggan dan Pembayaran Air Berbasis Web (studi pada PT Tirta Wangi Sejahtera). Jurnal Pengembangan Teknologi Informasi Dan Ilmu Komputer, 9(9), 2548–2964. https://j-ptiik.ub.ac.id/index.php/j-ptiik/article/view/15257

Rose, S., Borchert, O., Mitchell, S., & Connelly, S. (2022). NIST Special Publication 800-207.

Sternad Zabukovšek, S., Jordan, S., & Bobek, S. (2023). Managing Document Management Systems’ Life Cycle in Relation to an Organization’s Maturity for Digital Transformation. Sustainability (Switzerland). https://doi.org/10.3390/su152115212

Wang, T., & Wu, Q. (2023). Role Minimization Optimization Algorithm Based on Concept Lattice Factor. Mathematics. https://doi.org/10.3390/math11143047