Attribute-based access control: Difference between revisions

Revision as of 22:05, 16 October 2020

Revision as of 19:19, 19 November 2020

Line 23:

===Attributes===

Attributes can be about anything and anyone. They tend to fall into 4 different categories or functions (as in grammatical function):

# Subject attributes: attributes that describe the user attempting the access e.g. age, clearance, department, role, job title...

# Action attributes: attributes that describe the action being attempted e.g. read, delete, view, approve...