Unverified50% confidenceFactExact time
The core idea of RBAC is that permissions are not bound directly to users but to roles, which are then assigned to users or groups; ACL is a per-resource allowlist, while RBAC is an abstraction layered by function.
1
Sources
50%
Confidence
Long-term
Relevance
10/13/2026
First Seen
Sources
Related Entities
Related Claims
Unverified在RBAC模型中用户被分配角色而非直接被分配权限，ABAC则进一步引入时间、地理位置、设备状态等动态属性实现上下文感知授权74% similarUnverifiedRBAC（基于角色的访问控制）由NIST于2000年正式标准化，核心抽象层次为用户→角色→权限70% similarUnverifiedDeterministic rules typically correspond technically to models such as access control lists (ACL), role-based access control (RBAC), or attribute-based access control (ABAC).69% similarUnverifiedDataverse内置基于角色的访问控制（RBAC）可细化到字段级别68% similarUnverifiedACL（访问控制列表）是一种经典的权限模型，它为每个资源维护一个列表，记录哪些用户或角色可以对该资源执行哪些操作（读、写、执行等）。62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1017067API
curl https://kongchang.com/api/v1/knowledge/claims/1017067MCP
get_claim(id=1017067)