C2 (2 points)
https://knobit.org/id/task/dsec-access-control/C2
Also as Turtle · JSON-LD · RDF/XML
| dcterms:license | https://creativecommons.org/licenses/by/4.0/ |
|---|---|
| owl:sameAs | https://bitbucket.org/reffa/ontology/id/task/dsec-access-control/C2 |
| rdfs:label | C2 (2 points) en |
| schema:hasPart | dsec-access-control C2: the payments operator can create and approve |
| schema:hasPart | dsec-access-control C2: the conflict split into roles, not only monitored |
| schema:identifier | C2 |
| schema:position | 2 |
| schema:text | Segregation of duties, 1 each. (a) PAY_OPS holds create_payment and approve_payment, which SD-001 forbids together; the payments operator can create and approve the same transfer. (b) The conflict is resolved by splitting the roles - approve_payment moved to a separate role held only by the payments approver - not by adding monitoring or a report alone. en |