LDAPWiki: Permission

Overview#

Permission is complex and ambiguous without a provided context.

Permission generally as merriam-webster provides, Permission is:

We distinguish between a Privilege and a Permission

Permission is a component of Authorization which has the following Three Components, two of which are required:

The Context of the Privilege (Required)
- Legal
- Implied
- Domain
- File System
The Target Resource(s) (Required), to which the Permission is granted or revoked
- The file Name
- The LDAP OrganizationalUnit
The Resource Action delegated for the Target Resource
- CRUD
- Open
- Lock or Un-lock

Permission conflicts (or Privilege Conflicts) are common issues encountered.

Generally for most technical concepts, Permissions are either positive or negative.

Generally:

Access to the Target Resource is denied unless the Permission is granted.

Access Control is the process of determining whether a Permission or Privilege has been Authorized by a Trustor to a Trustee.

There might be more information for this subject on one of the following: