Access Control Requirements
RFC 2820: Access Control Requirements for LDAP, E. Stokes, D. Byrne, B. Blakey, P. Behera. May 2000
- Requirements for access control lists
- easy, efficient, extensible
- specific policies rule over non specific
- default policy for new entries
- sorting of the ACLs irrelevant
- all ACLs must be explicit
- one policy for several distributed entries
- ...