Unverified50% confidenceSolutionExact time
Access control should be based on the combined permissions of multiple identities, and policies must simultaneously account for all identities involved in the agent workflow (delegated and chained identities).
1
Sources
50%
Confidence
Long-term
Relevance
10/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedWhen a user belongs to multiple groups simultaneously, the system merges the permissions of all groups, taking the union as the final access scope.68% similarUnverifiedThe approach of modeling by business effect rather than interface name is referred to in the security field as Capability-Based Access Control.67% similarUnverified多代理架构通过关注点分离、上下文隔离和最小权限控制三重机制，在保持流程高效的同时兼顾可维护性与安全性66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/999097API
curl https://kongchang.com/api/v1/knowledge/claims/999097MCP
get_claim(id=999097)