summaryrefslogtreecommitdiff
path: root/ibac.mdwn
blob: b8d2606c27b43ea55caa32bbdfe290eebdc5616c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
[[!meta copyright="Copyright © 2007, 2008 Free Software Foundation, Inc."]]

[[!meta license="""[[!toggle id="license" text="GFDL 1.2+"]][[!toggleable
id="license" text="Permission is granted to copy, distribute and/or modify this
document under the terms of the GNU Free Documentation License, Version 1.2 or
any later version published by the Free Software Foundation; with no Invariant
Sections, no Front-Cover Texts, and no Back-Cover Texts.  A copy of the license
is included in the section entitled
[[GNU_Free_Documentation_License|/fdl]]."]]"""]]

IBAC stands for identity-based access control.
In this access control scheme, access to a resource
is based on identity of the caller.  This is often
problematic as when a program acts on behalf of
another, access is authorized based on its own
identity rather than that of the caller.

See also [[ABAC]].