Role-based access control - Wikipedia

Quoted on this wiki

Every place a page here uses this source, in the order the words come in it.

1. PA = Permission Assignment “A subject can have multiple roles.” A constraint places a restrictive rule on the potential inheritance of permissions from opposing roles. Thus it can be used to achieve appropriate separation of duties. For example, the same person should not be allowed to both create a login account and to authorize the account creation.

   In Buyer and user personas

Quotes are verbatim and belong to their publishers. Where a quote has been translated, the original wording is kept below it.