Attribute-based access control: Difference between revisions

Content deleted Content added
Implementations: Added the 3 main implementations
Changing short description from "Access control paradigm where access is evaluated based on attributes related to the subject, the object, requested operations and in some cases environmental attributes" to "Access control paradigm"
Line 1:
{{Short description|Access control paradigm where access is evaluated based on attributes related to the subject, the object, requested operations and in some cases environmental attributes}}
'''Attribute-based access control''' ('''ABAC'''), also known as '''policy-based access control''' for [[Identity management|IAM]], defines an access control paradigm whereby a subject's authorization to perform a set of operations is determined by evaluating attributes associated with the subject, object, requested operations, and, in some cases, environment attributes.<ref>{{Cite web|last=Computer Security Division|first=Information Technology Laboratory|date=2016-05-24|title=Attribute Based Access Control {{!}} CSRC {{!}} CSRC|url=https://csrc.nist.gov/Projects/Attribute-Based-Access-Control|access-date=2021-11-25|website=CSRC {{!}} NIST|language=EN-US}}</ref>