Access Control Methods

Mandatory Access Control

• Systems admin sets policy as to who can access what

Discretionary Access Control

• One entity enables another entity to access some resource
• Often implemented as a matrix with the rows being entities, and the columns being objects that are controlled.

Role Based Access Control

Attribute-based Access Control

• Users prove their possession of some require attributes needed to access a resource