Next: Separation of Administration Duty
Up: Specification
Previous: Forced Roles
In the standard case, all RC model administration is done through one or
more roles, which have their Admin Type attribute set to
Role Admin. This value gives full administrative privileges,
overriding the separation scheme presented in the next subsection, but no
access rights to objects.
Administration tasks are definition of roles and types, specification of
compatibilities, assignment of default, initial and forced roles to users and
program files and assignment of types to objects.
Amon Ott