Role-based access control
lastmod 2024-12-18created 2021-07-2013 edits
Role-based access control (RBAC) is a method in computer system security of controlling system access for authorized users. It is used by many enterprises with more than 500 employees and can implement mandatory access control (MAC) or discretionary access control (DAC). RBAC is also called role-based security.
Categories
- RBAC:Python - A sample implementing RBAC in Python.
Libraries
- simple-rbac (Python)
- py-rbac (Python)
- Casbin
- OpenIAM
- Cerbos - A language-agnostic, scalable user permission management solution
Design
The primary rules defined for RBAC are as follows:
- Role assignment
- Role authorization
- Permission authorization
When defining an RBAC model, the following conventions are useful:
- S = Subject
- R = Role
- P = Permissions
- SE = Session
- SA = Subject Assignment
- PA = Permission Assignment
- RH = Partially ordered Role Hierarchy
See also
- Access control
- LiveKit - Uses RBAC.
- Access-control list (ACL)
- Attribute-based access control (ABAC)
- Authentication