CORAL-AC Dataset: COrpus of RLS And ODRL policies for Linked Access Control

18 pages•Published: October 28, 2026

Carlos Rubio-Medina, Andrea Cimmino Arriaga, Nicoletta Fornara and Joaquin Gayoso-Cabada

Abstract

The availability of datasets containing machine-readable policies is essential for evaluating policy modelling approaches and policy decision engines. However, publicly available datasets that provide policies expressed using the Open Digital Rights Language (ODRL) remain scarce, particularly in domains requiring complex contextual information and operational constraints. This paper presents the CORAL-AC dataset, a curated collection of access control policies derived from a hospital information system scenario. The dataset includes fifteen policies represented at three complementary levels: natural language descriptions, SQL Row-Level Security (RLS) policies, and semantically equivalent policies expressed using ODRL. In addition, the dataset provides structured evaluation artefacts including states of the world, evaluation requests, and expected outcomes aligned with the ODRL formal semantics. The construction of the dataset follows a systematic methodology that starts from operational requirements and progressively externalises them into machine-readable policy representations. During this process, several modelling challenges were identified when representing operational access control rules using ODRL, particularly regarding role resolution, filtered assets, dynamic contextual information, and temporal constraints. The paper discusses these challenges and analyses how they can be addressed using extensions based on the ODRE approach. The resulting dataset aims to support research on policy modelling, semantic policy translation, and policy engine evaluation, providing a reusable resource for the ODRL community.

Keyphrases: data usage, health policies, odrl analysis, odrl dataset

In: Andrea Cimmino Arriaga, Beatriz Esteves, Nicoletta Fornara and Víctor Rodríguez Doncel (editors). Proceedings of 2nd Workshop ODRL and Beyond: Practical Applications and challenges for poLicy-base access and usage control, OPAL 2026, vol 113, pages 42-59.

Links:	https://easychair.org/publications/paper/X5xh
	https://doi.org/10.29007/zr7z

BibTeX entry

@inproceedings{OPAL2026:CORAL_AC_Dataset_COrpus,
  author    = {Carlos Rubio-Medina and Andrea Cimmino Arriaga and Nicoletta Fornara and Joaquin Gayoso-Cabada},
  title     = {CORAL-AC Dataset: COrpus of RLS And ODRL policies for Linked Access Control},
  booktitle = {Proceedings of 2nd Workshop ODRL and Beyond: Practical Applications and challenges for poLicy-base access and usage control, OPAL 2026},
  editor    = {Andrea Cimmino Arriaga and Beatriz Esteves and Nicoletta Fornara and Víctor Rodríguez Doncel},
  series    = {EPiC Series in Computing},
  volume    = {113},
  publisher = {EasyChair},
  bibsource = {EasyChair, https://easychair.org},
  issn      = {2398-7340},
  url       = {/publications/paper/X5xh},
  doi       = {10.29007/zr7z},
  pages     = {42-59},
  year      = {2026}}

Download PDF Open PDF in browser