Attribute-based access control: Difference between revisions

Revision as of 13:38, 30 July 2021

Revision as of 13:53, 12 August 2021

Line 81:

* Policy: managers can view transactions in their region

* Reworked policy in a data-centric way: users with {{code|code=role == manager}} can do the action {{code|code= == SELECT}} on {{code|code=table == TRANSACTIONS}} if {{code|code=user.region == transaction.region}}

=== Data security ===