Commit 877469f

mo khan <mo@mokhan.ca>
2025-03-17 17:34:04
docs: add conclusion on ReBAC paper
1 parent 8548a32
Changed files (1)
doc
share
doc/share/authz/ReBAC.md
@@ -105,6 +105,18 @@ A policy language facilitates:
 1. the specification of composite policies, which in turn forms the basis of trust delegation.
 1. **the static analysis of policies and system configuration.**
 
+## Context Hierarchy
+
+The context hierarchy assumes a tree shape: i.e., only single inheritance is permitted.
+Multiple inheritance corresponds to a more flexible means of constraining when
+relationships can be "activated" simultaneously.
+
+## Conclusion
+
+Relationship-Based Access Control works best in application domains in which
+binary relations are more natural for expressing authorization decisions than
+unary relations (e.g., roles).
+
 ## See also
 
 * [Relationship-Based Access Control: Protection Model and Policy Language by Philip W. L. Fong](https://cspages.ucalgary.ca/~pwlfong/Pub/codaspy2011.pdf)