Business:Concepts:Principle:Provide Access By Permission Rather Than Exclusion [Notes]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

# Business:Concepts:Principle:Provide Access By Permission Rather Than Exclusion #

* [[../|(UP)]]
{{indexmenu>.#2|nsort tsort}}
* See [[Business/Concepts/Principle/Ensure 8A Access/]]





<data principle #PRINC-xxxx>

Categories : Business, Information, Technology, Development

Title : Provide Access by Permission rather than Exclusion

Statement : Access to Confidential Attributes is Denied by Default unless authorized. Provide access to Non-Confidential Attributes wherever possible.

Rationale : 

Resources : * https://www.securecoding.cert.org/confluence/display/seccode/Top+10+Secure+Coding+Practices


</data>

<uml>
!includeurl http://skysigal.com/_media/resources/configuration/plantuml/minimalist.txt

  package Qualities {
    package Security {
      class Confidentiality
      class Integrity
      class Non-Repudiation
      class Accountability
      class Authenticity
      class Privacy
    }
  }
package TOGAF {
  class "Principle 14" as T1
}

  package Principles {
  
    class "Protect Sensitive Information" as P2
    class "Provide Access\nBy Permission\nRather Than Exclusion" as P1
    class "Ensure 8A Access" as 8A
    
    
    P2 <|-- P1
    P1 <|-- 8A
  }
  
  Security <-LEFT- 8A

  T1 -RIGHT- P2
</uml>