Choix d'un modèle
Comparaison de ACL, RBAC, ABAC, ReBAC et PBAC sur un même exemple : ce que chacun décide, ses points forts, ses faiblesses, quand le choisir et comment combiner RBAC avec ABAC.
Supported Models
Access control models supported by Casbin - ACL, RBAC, RBAC with domains, ABAC, ReBAC, PBAC, BLP, Biba, LBAC, OrBAC, UCON, RESTful, IP match, deny-override and priority.
Model Syntax
Casbin model syntax reference - request, policy, role and effect definitions and matchers in CONF files, with operators and examples.
**Effector**
L'interface Effector de Casbin combine les effets de toutes les règles de politique correspondantes en une seule décision, pour les effets allow-override, deny-override, priority et personnalisés.
Functions
Built-in Casbin matcher functions - keyMatch, keyMatch2-5, regexMatch, ipMatch, globMatch and key extraction - and how to register your own custom functions.
RBAC
5 éléments
ReBAC
What relationship-based access control (ReBAC) is, how it relates to Google Zanzibar, how it differs from RBAC and ABAC, and how to model user-resource relationships in Casbin.
ABAC
Ce qu'est le contrôle d'accès basé sur les attributs (ABAC), comment il diffère du RBAC, et comment écrire des règles ABAC dans Casbin : comparer les attributs utilisateur, ressource et environnement dans le matcher ou stocker les conditions comme politique.
PBAC
What policy-based access control (PBAC) is, how it differs from ABAC and RBAC, and how to store rule expressions as policy in Casbin and evaluate them at runtime with eval().
MAC
3 éléments
OrBAC
Implement organisation-based access control (OrBAC) in Casbin - roles, activities and views mapped to concrete users, actions and objects per organization.
Priority Model
Resolve conflicting rules with the Casbin priority model - implicit priority by policy order, explicit priority fields, and role-hierarchy-based priority.
What is Usage Control (UCON)? Continuous Authorization
What usage control (UCON) is: authorizations, obligations and conditions checked continuously during use, with mutable attributes, and how to implement it with Casbin.
Super Administrator in Casbin: Bypass Policy Checks
What a super administrator (root) is in Casbin, how to add one to the matcher, and how the same pattern works with RBAC, ABAC and RBAC with domains.