I have been using ACLs for user Rights Management in Web applications, but it is said that RBAC is more powerful than ACLs and where does the advantage manifest itself?
Reply content:
I have been using ACLs for user Rights Management in Web applications, but it is said that RBAC is more powerful than ACLs and where does the advantage manifest itself?
RBAC = Role Based Access Control
ACL = Access Control List
RBAC is the name of a privilege control system, ACL is the business rule in the permission system, they are not a specific software or algorithm. RBAC to use ACL to work, ACL does not necessarily serve RBAC, other rights control system in the permission rules are called ACLs.
So there is no comparability between the two.
In addition to RBAC, other rights control system what else, such as Windows with the Dac-based,dictionary access control