blob: 9cc49fbc354ccf18cc81eac669149c2543d04f1b (
plain)
1
2
3
4
5
6
|
Role based access control is very simple: every user has a list of
roles, which that user is allowed to assume, and every restricted part
of the app makes an assertion about the necessary roles.
If the user is a member in all of the required roles access is granted.
Otherwise, access is denied.
|