1 files changed, 8 insertions, 0 deletions
diff --git a/abac.mdwn b/abac.mdwn
new file mode 100644
index 00000000..5f0ba007
--- /dev/null
+++ b/abac.mdwn
@@ -0,0 +1,8 @@
+ABAC stands for authorization-based access control.
+In this model, access is not granted based on the
+identity of the caller but by an authorizing agent
+that delegates access to a particular resource.
+Such authorization is then encapsulated in
+[[capabilities]] allowing them to be freely [[delegated]].
+
+See also [[IBAC]].
+\ No newline at end of file