Attribute-based access control: Difference between revisions

Content deleted Content added
Restored revision 992544757 by MrOllie (talk): Spam
DACL in the Microsoft world is defined as discretionary access control list, see https://docs.microsoft.com/en-us/windows/win32/secgloss/d-gly . DAC is the abbreviation for dynamic access control.
Line 92:
=== File server security ===
 
As of Windows Server 2012, Microsoft has implemented an ABAC approach to controlling access to files and folders. This is achieved through dynamic access control lists (DACLDAC)<ref>https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/dynamic-access-control</ref> and Security Descriptor Definition Language (SDDL). SDDL can be seen as an ABAC language as it uses metadata of the user (claims) and of the file / folder to control access.
 
==See also==