rbac

Are users commonly implemented as Roles with the ability to login?

In recent versions of PostgreSQL users are implemented as roles that can login. Is this common in an RBAC implementations, that a user is just another role with the ability to login (or similar)? Some of what I've read so far doesn't suggest that... but maybe I've misread or just not read the right thing. ...

DB Schema of a Role Based Access Control

Hi, I'm currently developing a member administration for a local association here and I'm developing the database schema at the moment. I'd like to share it with you to improve it and give other an example of a Role Based Access Model (RBAC). I'd appreciate any constructive criticism especially about the relationships I used between the...

AXOs in phpGACL turn phpGACL into an RBAC?

While reading the phpGACL manual, I read AXOs are identical to AROs in many respects. There is an AXO tree (separate from the ARO tree), with it's own Groups and AXOs. When dealing with AXOs, consider an AXO to take the old role of the ACO (i.e. "things to control access on"), and change the view of ACOs from "things to...

Role Based Access Control

Are there any java open source role-based access control system? ...

Shortcomings of modelling roles as boolean columns on User table

I'm working on a Rails app using CanCan for RBAC and I only have 3 roles and maybe I'll add 1 or 2 more somewhere down the track. In the past I've always had roles as their own entity, joined to users via a m2m link-table. With so few, and static, roles, that seems like overkill. So I'm thinking of simply adding boolean columns to my ...