[cap-talk] The origin of Role Based Access Control

[Karp, Alan H]

David Chizmadia wrote:
> 
> Having been working on a project with Dave F. when he started the
> RBAC work..., the more precise phrasing would be that the cited
> paper is the first known attempt to formulate a policy model. The
> work started based on a survey NIST did of the health care community
> that indicated the widespread use of organizational roles as the
> basis for (what little) access control (was in use).
> 
That's indeed what they say in the paper, but I hadn't gotten that far
when I sent the note.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp