Role Based Access Control - martinbalke-401-adavanced-js/seattle-javascript-401n14 GitHub Wiki

RBAC

Role Based Access Control is a method for standardizing users access permissions to a database, therefore increasing security and allowing for a better structure of an organization.

In a RBAC database you have two main roles that are assigned the admin, and users. The admin will have full read and write access to the database and can make any changes or view any sensitive data. The user's permissions are defined based on the "role" the occupy. This is where the meat of RBAC lies, each user will have a corresponding role and only be able to read and write where that role has permissions. Should their account become compromised it will not lead to a fully compromised database thus insuring a higher level of security.