Attribute-Based Access Control
An authorization model that evaluates policies over attributes of the subject, resource, action, and environment.
Technical Context
ABAC can express fine-grained context-sensitive rules without creating a role for every combination, but policy evaluation becomes harder to audit and test. Attribute provenance, freshness, conflict resolution, and deny-overrides behavior must be explicit.
Related Concepts
- Role-Based Access Control
- policy engine
- least privilege
- authorization