Content deleted Content added
No edit summary |
|||
Line 1:
=Definition=
Attribute-based [[access control]] defines a new access control paradigm whereby access rights are granted to users through the use of policies which combine attributes together. The policies can use any type of attributes (user attributes, resource attribute, etc...). Attributes can be compared to static values or to one another thus enabling relation-based access control.
The standard that implements attribute-based and policy-based access control is [[XACML]], the eXtensible Access Control Markup Language.
=References=
|