课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

免费学习该课程！

今天就开通帐号，24,600 门业界名师课程任您挑！

Discretionary access controls

Discretionary access controls

课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

开始一个月试用 购买团队方案

Discretionary access controls

“

- [Instructor] Discretionary Access Control systems, or DAC systems, offer a flexible approach to authorization, allowing users to assign access permissions to other users. The owners of files, computers and other resources have the discretion to configure permissions as they see fit. Discretionary Access Control systems are the most common form of access control because they provide organizations with much needed flexibility. Imagine if users in your organization didn't have the ability to assign file rights to other users as needed, and IT had to be involved in every request. That that would certainly make life difficult, wouldn't it? Let's take a look at an example of a discretionary access control system. Imagine that we have a file containing information on some of the organization's employees. Alice, an analyst within Human Resources created this file and the operating system recognizes her as the file owner. Alice, however, created this file at Bob's request, and she wants Bob…

内容