Three doors to one set of data
Three things want one set of sales figures. An analyst at a desk. An auditor who may only look in office hours. A reporting app with no human at all.
One door suits each. The first is decided by the person's job. The second by a condition. The third by a key a program holds. This lesson names the three doors.
Key words
| Word | What it means | Example |
|---|---|---|
| RBAC | Short for role-based access control. | Analyst role |
| RuBAC | Short for rule-based access control. | Only in the office |
| Role-based access control | Access is given to a job role, and people get the role. | Analyst |
| Rule-based access control | Access is decided by a rule such as time or place. | Only in the office, 9 to 5 |
| API | A set of requests a program can send to use another system. | Ask for the sales for March |
| Role | A named set of access rights for a job. | Trainee |
| Key | A secret code a program sends to prove it is allowed. | k-123 |
| Platform | A system or service that data lives on. | The sales system |
The cells students fill in are left blank in this preview.
By the end of this lesson
Note
I can choose a way to give access to data across platforms that suits the need.
Starter: what you already know
Have a go
Starter: what you already know
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
Role-based access (RBAC)
In role-based access control, you give rights to a role, not to each person. A person gets a role and so gets its rights.
Trainee can read. Analyst can read and write. Manager can read, write and delete. When somebody changes job, you change their role.
Rule-based access (RuBAC)
In rule-based access control, a rule decides, whoever you are. The rule can look at the time, the place or the device.
An example rule: "Access only in the office, between 9 and 5." The same person is refused at 8pm or from home.
APIs let programs ask for data
An API is a set of requests that one program can send to another. A reporting app asks the sales system for March.
The app proves it is allowed by sending a key. APIs let different platforms share data without a person at a screen. But a leaked key gives access to anybody who finds it.
Check: which method?
Have a go
Check: which method?
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.