L6:

Materials

Here are raw slides (pdf) about authorization and access control.

  • After authentication, how does authorization work?
  • Authorization
    • There are two types of access controls * Discretionary * Manditory
    • Discretionary access controls * ACLs * Unix simplification * Only 3 notions of access make it simple to implement, and efficient to store policies. However, there are access configurations which cannot be expressed.