IT:AD:Design:Investigations:Security:Authorisation:ABAC
Summary
Attribute Based Access Control (ABAC) is by some, as:
Attribute-Based Access Control (ABAC) surpasses all previous authorization models. It provides easily scalable, dynamic, context-aware and risk-intelligent access control, essential for the modern enterprise.
That's a tall statement…
Notes
- Granted not on
Subject(User) rights, butAttributesof theSubject(eg: “Age>=18”)provided to the ABAC Engine, proven/backed by an Authority (ie:AttributesasClaims). Subject/User does not need to beAuthenticated(can beAnonymous) and still have provenAttributes.- Note: However this require means for proving claims anonymously. This can for instance be achieved using anonymous credentials or XACML.
- An ABAC
Control Policyspecifies whichClaimsare needed to be be satisfied in order to grant Access to an Object.