Answers are grounded in this paper and cite their sources.
Is it possible to obtain the flexibility and advantages of attribute-based access control while maintaining role-based access control's advantages for analysis and risk control?
No takes yet. Share an insight, caveat, or question.
Coyne et al. (2013) studied this question.
Synapse has enriched 10 related papers. Consider them for comparative context: