3 votes

Term for a access control model based on users sharing resources with each other?

You have described the classic "Discretionary Access Control (DAC)" model. https://resources.infosecinstitute.com/certification/access-control-models-and-methods/
schroeder's user avatar
  • 127k
1 vote

Is there a problem to store user permissions in the database instead of in a external auth service?

This is very common and there are no requirements to vest this information with some 3rd party service. You can simply set the flags against the user record, but you expose yourself to the risk of ...
brynk's user avatar
  • 1,071
1 vote

Sudo user without ability to login

So far I've learned it's impossible or otherwise too complex setup. Basically in other to confirm anything as other user, that user must be able to login. When a user is set to not have login it ...
Pawel Cioch's user avatar
1 vote

Granting Local Admin permissions on domain workstations

The canonical way to implement that kind of scenario according to Microsoft's best practice recommendations is: create a global security group "ERP software admins" in your AD domain and ...
Tilman Schmidt's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible