Changes between Version 40 and Version 41 of TIEDABACDemo
- Timestamp:
- 07/16/09 10:28:58 (15 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
TIEDABACDemo
v40 v41 33 33 == ABAC Notions: Principals and Attributes == 34 34 35 At its root, ABAC assigns attributes to principals. A principal represents an actor in the system: a researcher, a component manager, etc. Attributes about a principal determine what an pricipal is authorized to do. A principal that can prove they have a given attribute can carry out a given action. In the simplest case a principal has an attribute because another principal asserts it (principals can also assert attributes reflexively, but this is not common). We will see how more complex assignments of attributes occur throughout the demo.35 At its core, ABAC assigns attributes to principals. A principal represents an actor in the system: a researcher, a component manager, etc. Attributes about a principal determine what an pricipal is authorized to do. A principal that can prove they have a given attribute can carry out a given action. In the simplest case a principal has an attribute because another principal asserts it (principals can also assert attributes reflexively, but this is not common). We will see how more complex assignments of attributes occur throughout the demo. 36 36 37 37 In the attribute explorer, principals are ovals and attributes are boxes. The direct assignment of an attribute is conveyed through an arrow.