diff options
| author | Samuel Thibault <samuel.thibault@ens-lyon.org> | 2019-04-03 23:42:32 +0200 |
|---|---|---|
| committer | Samuel Thibault <samuel.thibault@ens-lyon.org> | 2019-04-03 23:42:32 +0200 |
| commit | 70b8fc57e8e29c4d4a1284c2267651943ac02b4e (patch) | |
| tree | 1b839e207a3f3c516e684420396e388cf8ae1487 /abac.mdwn | |
| parent | e1a127efc582faabce933d0943eceae797634168 (diff) | |
| parent | 93b266266b6200a64372e02564729bf5f27cfd3e (diff) | |
Merge branch 'master' of braunbox:~hurd-web/hurd-web
Diffstat (limited to 'abac.mdwn')
| -rw-r--r-- | abac.mdwn | 10 |
1 files changed, 9 insertions, 1 deletions
@@ -1,4 +1,4 @@ -[[!meta copyright="Copyright © 2007, 2008 Free Software Foundation, Inc."]] +[//]: # ([[meta copyright="Copyright © 2007, 2008 Free Software Foundation, Inc."]]) [[!meta license="""[[!toggle id="license" text="GFDL 1.2+"]][[!toggleable id="license" text="Permission is granted to copy, distribute and/or modify this @@ -8,6 +8,8 @@ Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included in the section entitled [[GNU Free Documentation License|/fdl]]."]]"""]] +[[!meta title="ABAC"]] + ABAC stands for authorization-based access control. In this model, access is not granted based on the identity of the caller but by an authorizing agent @@ -15,4 +17,10 @@ that delegates access to a particular resource. Such authorization is then encapsulated in [[capabilities|capability]] allowing them to be freely [[delegated|delegation]]. +Back in 2009, there [has been talk about](https://www.hpl.hp.com/techreports/2009/HPL-2009-30.html) renaming "ABAC" to "ZBAC - [AuthoriZation Based Access Control](https://objectsecurity.com/blog/2016/08/05/authorization-based-access-control-zbac-model-driven-security/)" - This article says "ZBAC" instead of ABAC to avoid confusion, supposedly with "ABAC - Attribute-Based-Access-Control" + See also [[IBAC]]. + +#External Links +* [[!wikipedia Computer_Access_Control]] on Wikipedia +* [[!wikipedia Access_Control_List]] on Wikipedia |