All geek questions in one place

Attribute and Activity Based Access Control

What is the difference between attribute-based access control and action-based access control in the context of cloud authorization?

+4
source share
1 answer

Attribute-based access control is an access control (or authorization) model defined by NIST that facilitates the use of attributes to define access control policies. This is an evolution from the role-based access control model (RBAC) that prevails today.

Example:

  • == manager == view == blog post, object.owner == user.id
  • , , , - , .

xacml ABAC.

abac - NIST.

- , , -, .

+3

Source: https://habr.com/ru/post/1530854/

More articles:


All Articles