From d034240ecdffaaf7c50b740a3958f80a07cbd6b3 Mon Sep 17 00:00:00 2001 From: mo khan Date: Fri, 14 Mar 2025 10:57:45 -0600 Subject: docs: add prelim notes on ReBAC --- doc/share/authz/README.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) (limited to 'doc/share') diff --git a/doc/share/authz/README.md b/doc/share/authz/README.md index 50aeb4c..52d330f 100644 --- a/doc/share/authz/README.md +++ b/doc/share/authz/README.md @@ -147,5 +147,19 @@ directly into each transaction_. ### Relationship-Based Access Control (ReBAC) +> Authorization decisions are based on the relationship between the resource owner +> and the resource accessor in a social network maintained by the protection +> system. + +A Social Network System (SNS) maintains a social network for at least two reason: + +1. It is used by the users to navigate the information space of the system +2. The social network is used as a basis for formulating the access control + policies of user contributed resources. + +References + +* [Relationship-Based Access Control: Protection Model and Policy Language by Philip W. L. Fong](https://cspages.ucalgary.ca/~pwlfong/Pub/codaspy2011.pdf) + ### Attribute-Based Access Control (ABAC) -- cgit v1.2.3