> On Jun 1, 2015, at 8:20 AM, Nicolas Eirea <[email protected]> wrote: > > > could i have more information about step 4 "support for attribute-based > access control" ?
Needs further study. My preference is to follow formal (and accepted) published standards to the extent possible - as opposed to inventing yet another access control model. Paradoxically ABAC is a field that, although widely populated with so-called adherents, has few formal specifications that govern its use. Having said that there are some documents that can be used to provide direction: http://csrc.nist.gov/projects/abac/ http://csrc.nist.gov/groups/SNS/rbac/documents/kuhn-coyne-weil-10.pdf Shawn [email protected]
