Concept - Access Control Elements
| Element | Definition | Examples |
|---|---|---|
| Subject (s.10) | entity that can access objects; a process representing a user/application | classes: owner, group, world |
| Object (s.11) | access-controlled resource | files, directories, records, programs; number/type depend on the environment |
| Access right (s.11) | way in which a subject accesses an object | read, write, execute, delete, create, search |
Subject classes (s.10)
- Owner: may be the creator of a resource such as a file; system resources may belong to a system administrator; project resources to a project administrator or leader.
- Group: a named group of users granted access rights; membership is sufficient to exercise them.
- World: the least access; users who can access the system but are in neither owner nor group.
Related: Concept - Access Matrix, Concept - Discretionary Access Control. Appears in 04 Access Control - Chunk 01 (s.1-28).