Three doors to one record
Three things want one ticket record. A technician at a desk. An auditor who may only look on site hours. A phone app with no human at all.
One door suits each. The first is decided by the person's job. The second by a condition. The third by a key a program holds. This lesson names the three doors.
By the end of this lesson
Note
I can choose a way to give access to data that suits the need.
Key words
| Word | What it means | Example |
|---|---|---|
| RBAC | Short for role-based access control. | Technician role |
| RuBAC | Short for rule-based access control. | Only on site |
| Role-based access control | Access is given to a job role, and people get the role. | Technician |
| Rule-based access control | Access is decided by a rule such as time or place. | Only on site, 9 to 5 |
| API | A set of requests a program can send to use another system. | Ask for ticket 12 |
| Role | A named set of access rights for a job. | Intern |
| Key | A secret code a program sends to prove it is allowed. | k-123 |
| Platform | A system or service that data lives on. | The ticket system |
The cells students fill in are left blank in this preview.
Starter: what you already know
Have a go
Starter: what you already know
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
Role-based access (RBAC)
In role-based access control, you give rights to a role, not to each person. A person gets a role and so gets its rights.
Intern can read. Technician can read and write. Manager can read, write and delete. When somebody changes job, you change their role.
Rule-based access (RuBAC)
In rule-based access control, a rule decides, whoever you are. The rule can look at the time, the place or the device.
An example rule: "Access only on site, between 9 and 5." The same person is refused at 8pm or from home.
APIs let programs ask for data
An API is a set of requests that one program can send to another. A phone app asks the ticket system for ticket 12.
The app proves it is allowed by sending a key. APIs let different platforms share data without a person at a screen. But a leaked key gives access to anybody who finds it.
Check: which method?
Have a go
Check: which method?
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.