Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [xacml]

XACML is the eXtensible Access Control Markup Language, an open standard for specifying and evaluating authorization and access control policies.

Filter by
Sorted by
Tagged with
2 votes
1 answer

How to implement MySQL query fo RBAC authorization with fine grained business restrictions in role?

When implementing an authorization system like RBAC/DAC, or XACML, or the AWS IAM authorization model, I see that I can't totally decouple business logic from authorization when there are fine-grained ...
null_pointer's user avatar
1 vote
1 answer

Attribute-based access control standard definition

While reading a number of definitions of attribute-based access control (ABAC), I found that there are two different definitions: Access control decisions are made using the attributes of users, ...
synthesis's user avatar
  • 155
6 votes
1 answer

How to get better IAM understanding

I'm getting interested in Identity and Access Management (IAM), but I find it hard to find complete and understandable explanations that suit me, surely because I started wrong. I began with ...
Bytemare's user avatar
  • 163
3 votes
1 answer

Access based on type of information requested and access grant

The simple solution to access restriction when number of users are small is Access Control Matrix. Here the rows are the users and columns are different types of asset. In my case, I have a document ...
prakharjain's user avatar
1 vote
1 answer

Authorization based on OASIS ABAC/RBAC/XACML approach

Is anybody aware of any open source .NET authorization solution based on OASIS ABAC/RBAC/XACML approach? I have found some visible amount of Java based solutions but it seems .NET is completely out ...
AC.'s user avatar
  • 113
5 votes
2 answers

Can I use stormpath user management service with a XACML library like BALANA?

I'm trying to implement some security access control in a software I'm building. I came across Stormpath for user management and they have somewhat an approach for RBAC yet what I was considering is ...
user53158's user avatar