Role-based access control (RBAC) has been discussed a lot in recent days, for example [SAND96a..MOHA94]. Although there are many variations, there is some consensus about the basic architecture. That is, all permissions are assigned to roles, rather than directly to users, and
No takes yet. Share an insight, caveat, or question.
Fang et al. (1996) studied this question.