Collaborate Disseminate
I’m working on an application that needs access control. Basically, the problem I’m facing is this (heavily simplified):
The application has two main sections:
Files = File[]
Contacts = Contact[]
A File resource can hav… Continue reading RBAC: how to separately scope two resources that have a many-to-many relationship
We got a bunch of different services (SPAs + API GW, legacy JavaEE apps, etc.). Each of those is usually ran in multiple instances (customer specific instances). The plan is to federate them under a single-sign on.
We also need to be able… Continue reading SSO authentication & authorization architecture/implemenation
Here is the problem
A company has 1250 employees and the employees have been trained to
handle 4 job duties:
Clerks: 1200 of the employees have been approved to work as clerks. To
do their job, a clerk needs a t… Continue reading Question about access control with RBAC and DAC
O1 O2 O3 O4
S1 w r w rw
S2 rw r
S3 w w r
S4 w w w r
S5 rw rw r
Aidan summarizes what’s been going on in Azure IaaS in August, and I’ll also discuss a few features and services that you might have missed or forgotten about.
The post Everything You Need to Know About Azure Infrastructure – August 2018 appeared first on Petri.
Continue reading Everything You Need to Know About Azure Infrastructure – August 2018
Almost all applications mantain the permissions with the application and have no way of having at least the roles outside the application.
Is the only way to have centralized authentication but mantain the authorization insi… Continue reading How can an organization manage permissions in a centralized way?
I’ve gone through a few security tutorials on AWS and noted that each tutorial focused on role-based access control only. Has anyone used rule-based access control on AWS? If so, could you point me to links or documentation… Continue reading Is It Possible to Implement Rule-Based Access Control on Amazon Web Services?
Aidan Finn discusses how you can share the customizable experience of the Azure Portal with other administrators and delegated administrators of your subscription.
The post Sharing Azure Portal Dashboards appeared first on Petri.
In this image, in definition of RBAC0, for point 5, if we change the Union to Intersection, will happen and present a use case scenario for this.
What’s the difference between Non-discretionary access control and Role-based Access Control? In CISSP book both mentioned in the different paragraph as in different entity. But In some other place (Cisco Learning Resource) i… Continue reading Difference between Non-discretionary and Role-based Access control?