Re: About ACCESS_CONTROL and SUPERVISOR rights

Am Maandag 12 Januor 2009 schrieb Javier J. Martínez Cabezón:
> Thanks for your answers Amon. I think this part of the handbook that
> explains the rc model is a bit confuse:
>
> – ACCESS_CONTROL: Change normal (old) access rights to this type for
> your administrated roles
> – SUPERVISOR: Change these new special rights to this type for your
> administrated roles.
>
> Can  it be substitute by: ACCESS_CONTROL: Change none-security related
> rsbac access rights to this type for your administrated roles.
> -SUPERVISOR: Permits add or remove security rsbac related rights to
> this type for your administrated roles.
>
> At first I though MODIFY_PERMISSIONS_DATA and ACCESS_CONTROL were
> redundant I was wrong seems.

Thanks for your notes. I have significantly updated the RC description at
http://www.rsbac.org/documentation/rsbac_handbook/security_models/rc

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22