Access Control (ACL) - 401-advanced-javascript-billybunn/seattle-javascript-401d29 GitHub Wiki

Access Control Lists

ACL stands for Access Control Lists. An ACL is a way of defining what each user (or group of users) is allowed access to. For instance, only users from the accounting department have access to the general ledger; people in the marketing dept can't book entries. Likewise, accountants don't have access to HR files.

Role-Based Access Control

RBAC is a way of restricting access by assigning "roles". Different roles will have different levels of access than others. For instance, users would have access to their accounts, but not access to edit the application itself.

---

Resources

Read

• 5 steps to rbac
• rbac at Rackspace

Skim

• wiki - rbac

Watch

• rbac tutorial