[cap-talk] Architectural Choices for Security: terminology

[Karp, Alan H]

Bill Frantz wrote:
> 
> How about identity-centric and reference-centric 
> authorization?  (Ducking)
> 
Because roles (RBAC) and attributes (PBAC) aren't identities, and not
all authorizations are used as references.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp