Integrating Supervisor Access Using Hybrid RBAC-ABAC In A Web-Based Research Permit Information System

The increasing demand for research activities in hospitas requires a secure, reliable and efficient information system to manage research permit applications. In many healthcare institutions, supervisory teams, play a crucial role in monitoring research activities to ensure compliance with institusional policies and ethical standards. This study presents the integration of supervisory team access into the existing web-based Research Permit Information System at Dr. Moewardi General Hospital. The integration is designed to enable the supervisory team to directly access and review research data through the system with access control aligned by hospital’s organizational hierarchy and regulations. To enhancing security and handling some access scenarios, a hybrid access control model combining Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) is implemented. RBAC is used to define role-specific permissions for different supervisory levels, ensuring consistent enforcement of access boundaries. ABAC complements this by allowing more granular, attribute-driven policies that improve adaptibility to dynamic and context-specific access requirements. The proposed hybrid model strengthens system security and increase flexibility in access management for various supervisory role. This approach demonstrates a practical and scalable solution for integrating multiple access control mechanism in a healthcare research context.