Quote: access list contains a 32-bit mask of positive and negative rights; unioned with group rights in 1 scan; negative overrides positive

Quotation Skeleton

An entry in an [Vice] access list maps … in a 32-bit mask. The interpretation of rights … is the union of all the rights possessed … [the user and all] of the groups of which he or … a list of Positive Rights and a list … In case of conflict, denial overrides possession. Negative … [access] rights are … [p. 262] The algorithm executed during an access list … [The group memberships of a user are sorted, and the combined rights is determined by a single scan of the access list using bitwise operations].   Google-1   Google-2

Copyright clearance needed for quotation.

Additional Titles

Quote: use negative access rights for rapid and selective revocation of rights to sensitive objects

Related Topics

Topic: security by access rights (36 items)