Timeline for Role-Based Access Control Disadvantages
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 15, 2017 at 15:17 | comment | added | Steve | I should have prefaced with 'in practice', meaning in most large organizations I've worked with over the years. | |
| Feb 15, 2017 at 14:51 | comment | added | Jacco | Hierarchical RBAC is one of the four levels or RBAC as defined in the RBAC standard set out by NIST. Most people agree, out of the four standard levels, the Hierarchical one is the most important one and nearly mandatory if for managing larger organizations. | |
| Feb 15, 2017 at 14:19 | comment | added | Steve | Expanding on the role explosion (ahem)... one artifact is that roles tend not to be hierarchical so you end up with a flat structure of roles with esoteric naming like Role_Permission_Scope. As such they start becoming about the permission and not the logical role. | |
| Feb 15, 2017 at 13:45 | history | edited | Jacco | CC BY-SA 3.0 |
added 20 characters in body
|
| Feb 14, 2017 at 19:34 | history | answered | Jacco | CC BY-SA 3.0 |