# Question about access control with RBAC and DAC

Here is the problem

A company has 1250 employees and the employees have been trained to handle 4 job duties:

Clerks: 1200 of the employees have been approved to work as clerks. To do their job, a clerk needs a total of 10 different permissions.

Tellers: 100 of the employees have been approved to work as tellers. To their job, a teller needs a total of 9 different permissions.

Managers: 10 employees have been approved to work as managers. To do their job, a manager needs a total of 6 different permissions.

Auditors: 2 employees have been approved to work as auditors. To do their job, an auditor needs a total of 4 different permissions.

So the problem asks for the number of relationship between users and permissions for (1) RBAC and (2) discretionary access control. This is what i have so far:

for DAC, the relationship is a matrix of users vs permission, there are total of 1250 users and 29 permission so the number of relationship I got is 36,250.

for RBAC, we need two matrix, one for users and roles, and one for roles and permission, so basically I did 1250 * 4 (users X roles ) + 29 * 4 (roles X permissions) which gets me 5116.

Are these values correct? or am attempting this problem wrong.