Access controls (sec +)

Least Privilege

security principle that requires users, programs, or processes to be granted only the minimum level of access rights and permissions necessary to perform their required tasks

Mandatory Access Control (MAC)

highly structured security model where the operating system or a security model where access to resources is enforced by a central authority based on pre-defined rules, not user discretion

Discretionary Access Control (DAC)

a flexible security model where the owner of a resource (like a file or folder) decides who can access it and what they can do (read, write, execute) using Access Control Lists (ACLs)

Role-Based Access Control (RBAC)

an access control model where permissions are not assigned directly to individual users, but are instead assigned to predefined job functions or roles

Rule-Based Access Control

a security model where access to resources is granted or denied based on a set of administrator-defined rules or policies

Attribute-Based Access Control (ABAC)

a model that grants access to resources based on attributes of the user, the resource, the environment, and the action being requested, rather than using static roles

Time-of-Day Restrictions

a type of access control mechanism that limits when a user or a system can access a resource based on the specific hour or day of the week