Unterstützte Modelle

1. ACL (Zugriffskontrollliste)
2. ACL mit Superuser
3. ACL without users: This is especially useful for systems that don't have authentication or user logins.
4. ACL without resources: In some scenarios, the target is a type of resource instead of an individual resource. Permissions like "write-article" and "read-log" can be used. This doesn't control access to a specific article or log.
5. RBAC (Rollenbasierte Zugriffssteuerung)
6. RBAC with resource roles: Both users and resources can have roles (or groups) at the same time.
7. RBAC with domains/tenants: Users can have different sets of roles for different domains/tenants.
8. ABAC (Attribute-Based Access Control): Syntax sugar like "resource.Owner" can be used to get the attribute for a resource.
9. RESTful: Supports paths like "/res/*", "/res/:id", and HTTP methods like "GET", "POST", "PUT", "DELETE".
10. Deny-override: Both allow and deny authorizations are supported, where deny overrides allow.
11. Priority: The policy rules can be prioritized, similar to firewall rules.

Beispiele

Modell	Modelldatei	Richtlinien-Datei
ACL	basic_model.conf	basic_policy.csv
ACL mit Superuser	basic_mit_root_model.conf	basic_policy.csv
ACL ohne Benutzer	basic_without_users_model.conf	basic_ohne Benutzer_policy.csv
ACL ohne Ressourcen	basic_without_resources_model.conf	basic_ohne Ressourcen_policy.csv
RBAC	rbac_model.conf	rbac_policy.csv
RBAC mit Ressourcen-Rollen	rbac_with_resource_roles_model.conf	rbac_with_resource_roles_policy.csv
RBAC mit Domänen/Mandanten	rbac_with_domains_model.conf	rbac_mit_domains_policy.csv
ABAC	abac_model.conf	N/A
Ruhen	keymatch_model.conf	keymatch_policy.csv
Verweigerung überschreiben	rbac_with_no_deny_model.conf	rbac_mit_deny_policy.csv
Zulassen und verweigern	rbac_with_deny_model.conf	rbac_mit_deny_policy.csv
Priorität	priority_model.conf	priority_policy.csv
Explizite Priorität	prioritär_model_explizit	priority_policy_explicit.csv
Betreff-Priorität	theme_priority_model.conf	priority_policyl.csv