ABAC

The ABAC model is an attribute-based approach to access control, where access decisions are made based on user attributes, resources and context. This enables finer-grained authorization management, taking into account multiple and complex criteria to determine appropriate access to a resource.

ABAC stands for Attribute-Based Access Control. It's an access control model used to manage authorizations and permissions in computer systems.

In the ABAC model, access decisions are based on user, resource and context attributes. Unlike the RBAC which focuses on roles, the ABAC model takes several attributes into account to determine appropriate access to a resource.

Attributes are characteristics that describe users, resources and system conditions. They can include information such as the user's identity, location, time, level of safety data classification criteria, etc.

The ABAC model uses an access policy that defines the rules for deciding whether a user has the right to access a resource. These rules are based on logical expressions that combine attributes to evaluate authorization. For example, a rule might be defined as follows: "If the user's role is internal, he participates in such-and-such a workgroup, and he is an expert in such-and-such a field, then authorize access to the resource".

The ABAC model offers greater flexibility in managing authorizations, as it allows more complex criteria to be taken into account. For example, it can take into account attributes such as age, membership of a specific group, skills and so on.