Changes between Version 44 and Version 45 of Internal/Rbac/OrbitRbacDesign/ResourcesRoles


Ignore:
Timestamp:
Oct 25, 2006, 7:09:01 PM (18 years ago)
Author:
anonymous
Comment:

—

Legend:

Unmodified
Added
Removed
Modified

  • Internal/Rbac/OrbitRbacDesign/ResourcesRoles

    v44 v45  
    77The design of the ORBIT RBAC resources and roles needs to be as extensible as possible regarding adding resources.
    88
    9 As much effort as possible in the time available has gone into identifying all of ORBIT's resources and defining ORBIT roles.  It is posible though that experience with projects and role-based access control in ORBIT or future uses of ORBIT will require changes to ORBIT roles.  An extensible design regarding redefinition of roles is not an explicit goal of this design.
     9As much effort as possible in the time available has gone into identifying all of ORBIT's resources and defining ORBIT roles.  It is possible though that experience with projects and role-based access control in ORBIT or future uses of ORBIT will require changes to ORBIT roles.  An extensible design regarding redefinition of roles is not an explicit goal of this design.
    1010
    1111A key decision is what pairs of roles will be mutually exclusive for purposes of dynamic separation of duty, i.e., no user will be allowed to be active in both roles at the same time.