| Both sides previous revision Previous revision | |
| public:99_annexes:annex-b-terms-and-definitions:a:access_control [2026/09/12 17:42] – ↷ Page moved from private:99_annexes:annex-b-terms-and-definitions:a:access_control to public:99_annexes:annex-b-terms-and-definitions:a:access_control nick_dido | public:99_annexes:annex-b-terms-and-definitions:a:access_control [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido |
|---|
| ====== Access Control ====== | ====== Access Control ====== |
| |
| [[private:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] | [[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] |
| |
| ===== Discussion ===== | ===== Discussion ===== |
| |
| Access Control regulates interactions between a subject and a protected resource according to an applicable [[private:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]]. | Access Control regulates interactions between a subject and a protected resource according to an applicable [[public:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]]. |
| |
| A subject includes a person, organisation, process, service, system, device, or [[private:99_annexes:annex-b-terms-and-definitions:n:node|Node]]. A resource includes information, an artifact, a service, an interface, a function, a system, a physical location, or another controlled object. | A subject includes a person, organisation, process, service, system, device, or [[public:99_annexes:annex-b-terms-and-definitions:n:node|Node]]. A resource includes information, an artifact, a service, an interface, a function, a system, a physical location, or another controlled object. |
| |
| An access-control decision evaluates the subject, requested action, protected resource, applicable policy, environmental conditions, and other relevant attributes. The decision grants, denies, limits, or terminates the requested access. | An access-control decision evaluates the subject, requested action, protected resource, applicable policy, environmental conditions, and other relevant attributes. The decision grants, denies, limits, or terminates the requested access. |
| |
| [[private:99_annexes:annex-b-terms-and-definitions:a:authentication|Authentication]] commonly supplies verified identity or attribute information used in an access-control decision. Authentication remains distinct from Access Control. Authentication evaluates a claim. Access Control determines whether the applicable policy permits the requested interaction. | [[public:99_annexes:annex-b-terms-and-definitions:a:authentication|Authentication]] commonly supplies verified identity or attribute information used in an access-control decision. Authentication remains distinct from Access Control. Authentication evaluates a claim. Access Control determines whether the applicable policy permits the requested interaction. |
| |
| ===== Definition ===== | ===== Definition ===== |
| An access-control policy identifies the subjects, resources, permitted actions, prohibited actions, conditions, exceptions, decision authorities, and enforcement points within its scope. | An access-control policy identifies the subjects, resources, permitted actions, prohibited actions, conditions, exceptions, decision authorities, and enforcement points within its scope. |
| |
| Access-control records support [[private:99_annexes:annex-b-terms-and-definitions:a:auditability|Auditability]], [[private:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]], and [[private:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]] by recording access requests, decisions, enforcement actions, and relevant context. | Access-control records support [[public:99_annexes:annex-b-terms-and-definitions:a:auditability|Auditability]], [[public:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]], and [[public:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]] by recording access requests, decisions, enforcement actions, and relevant context. |
| |
| ===== Example ===== | ===== Example ===== |