Sunday, October 17, 2010

RBAC, Role Based Access Control

In computer systems security, role-based access control (RBAC) is an approach to restricting system access to authorized users. It is a newer alternative approach to mandatory access control (MAC) and discretionary access control (DAC). RBAC is sometimes referred to as role-based security.


http://en.wikipedia.org/wiki/Role-based_access_control


The NIST RBAC model is a standardized definition of role based access control. Although originally developed by the National Institute of Standards and Technology, the standard was adopted and is copyrighted and distributed as INCITS 359-2004 by the International Committee for Information Technology Standards(INCITS). It is managed by INCITS committee CS1.


http://en.wikipedia.org/wiki/NIST_RBAC_model

A open source RBAC implementation

http://www.openrbac.de/

No comments: