Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Resource inheritance means that subjects which are assigned an action on a resource have other implied resources for that action (and inherited actions). 

...

  • group, role and role hierarchies, draft proposal for MACE-wide model and definition
    • Are the definitions in the glossary good enough or are their others that are more widely accepted?
      • mace documents ( grouper)  vs other standards groups

...

An institution's organization chart or course structure could be modeled as privilege resources.  Instructors could be granted privileges on individual courses, and deans could be granted privilege actions on entire departments or schools.  Sometime a resource which implies other resources is referred to as a role, however, it might be that the bundle of resources qualifies a role instead of defines a new role.

Groups, roles, privileges, and external authorization

...