Design access control

https://knobit.org/id/activity/SO-3

dcterms:license	https://creativecommons.org/licenses/by/4.0/
owl:sameAs	https://bitbucket.org/reffa/ontology/id/activity/data-security/03-access-control
rdfs:comment	Stage 3 (Access control) of the data-security skill: produces 03-access/access-model.yaml and passes the stage's validation gate. en
rdfs:label	Design access control en
rdfs:label	Juurdepääsukontrolli kavandamine et
requires knobit	Explains segregation of duties
requires knobit	Recognises a restricted column without access design
requires knobit	Recognises a role granting more than its jobs require
requires knobit	Recognises a toxic combination in one role
requires knobit	Recognises a toxic combination across a job's roles
requires knobit	Recognises masking a join can undo
requires knobit	Recognises row security on an updatable column
requires knobit	Recognises a privileged role with no logging
requires knobit	Recognises break-glass access with no expiry
requires knobit	Recognises an access role with no owner
requires knobit	Recognises an administrator reading restricted data
requires knobit	Recognises masking applied to one copy only
requires knobit	Recognises a shared privileged account
requires knobit	Splits a toxic combination into separate roles
requires knobit	Closes the clear-text paths around a masked column
requires knobit	Removes excess entitlements while keeping every duty covered
requires knobit	Explains least-privilege access design
requires knobit	Explains data masking and its limits
requires knobit	Explains privileged and emergency access
requires knobit	Explains row-level security
schema:position	3

Used by

consists of	Data security