Modèles pris en charge
- ACL (liste de contrôle d'accès)
- ACL avec superutilisateur
- ACL without users: This is especially useful for systems that don't have authentication or user logins.
- ACL without resources: In some scenarios, the target is a type of resource instead of an individual resource. Permissions like "write-article" and "read-log" can be used. This doesn't control access to a specific article or log.
- RBAC (contrôle d'accès par rôle)
- RBAC with resource roles: Both users and resources can have roles (or groups) at the same time.
- RBAC with domains/tenants: Users can have different sets of roles for different domains/tenants.
- ABAC (Attribute-Based Access Control): Syntax sugar like "resource.Owner" can be used to get the attribute for a resource.
- RESTful: Supports paths like "/res/*", "/res/:id", and HTTP methods like "GET", "POST", "PUT", "DELETE".
- Deny-override: Both allow and deny authorizations are supported, where deny overrides allow.
- Priority: The policy rules can be prioritized, similar to firewall rules.
Exemples
| Modélisation | Fichier modèle | Fichier de régulation |
|---|---|---|
| ACL | Conf de base | Csv |
| ACL avec super-utilisateur | Basique avec le modèle racine.conf | Csv |
| ACL sans utilisateurs | Basic_without_users_model.conf | format@@0 Basic_without_users_policy |
| ACL sans ressources | Modèle de base sans ressource | format@@0 Basic_without_resources_policy |
| RBAC | format@@0 rbac_model.conf | format@@0 rbac_policy.csv |
| RBAC avec les rôles de ressource | format@@0 rbac_with_resource_model.conf | format@@0 rbac_with_resource_roles_policy |
| RBAC avec domaines/locataires | format@@0 rbac_with_domains_model.conf | format@@0 rbac_with_domains_policy.csv |
| ABAC | format@@0 abac_model.conf | N/A |
| RESTANT | format@@0 keymatch_model.conf | Csv |
| Refuser la substitution | format@@0 rbac_with_not_deny_model.conf | format@@0 rbac_with_deny_policy.csv |
| Allumer et refuser | format@@0 rbac_with_deny_model.conf | format@@0 rbac_with_deny_policy.csv |
| Priorité | modèle_priorité | csv |
| Priorité explicite | modèle de priorité explicite | csv |
| Sujet-Priorité | modèle_priorité_objet | Priorité_objet_politique.csv |