LearnViz CompSci
Home / Learn / Security & Cryptography / Access Control Models

Beginner Topic 11 of 51 Security & Cryptography

Access Control Models

DAC, MAC and RBAC schemes.

How it works

Access control models define how permissions are decided. Discretionary access control lets owners grant rights to others, as in Unix file permissions; mandatory access control enforces system-wide policy based on labels and clearances, as in SELinux and military systems; role-based access control assigns permissions to roles that users hold; attribute-based access control evaluates policies over attributes of user, resource and context; and relationship-based models derive access from relationships, as in Google Zanzibar.

Step-by-step walkthrough

  1. DAC: owners grant access to their files.
  2. MAC: a central policy with labels decides, owners cannot override.
  3. RBAC: permissions attach to roles such as editor, and users get roles.
  4. RBAC scales well in companies.
  5. Pick by sensitivity and how often access changes.

Where it is used

Operating systems, databases, cloud platforms, document-sharing apps and enterprise identity systems choose among these models according to complexity and risk.

Common pitfall

RBAC can suffer role explosion as exceptions multiply, and DAC lets users share too broadly. ABAC policies get complex to audit. Deny by default, separate duties for sensitive actions and test policies with realistic scenarios. Keep access lists reviewable and log decisions.

Where it fits in the course

Access Control Models is topic 11 of 51 in Security & Cryptography, rated Beginner. It follows Authentication vs Authorization. The next topic is Encryption Basics.

Practice and explore

How to study this topic

  1. Read the explanation above and restate the definition in your own words.
  2. Open the interactive lesson and answer its mini quiz.
  3. Read the common pitfall, then write a short example that avoids it.
  4. Check your understanding in the Security & Cryptography quiz, and revisit the topic if you miss a question.

Frequently asked questions

What is Access Control Models?
DAC, MAC and RBAC schemes. It belongs to Security & Cryptography and is a beginner-level topic.
Where do people use Access Control Models?
Operating systems, databases, cloud platforms, document-sharing apps and enterprise identity systems choose among these models according to complexity and risk.
What is the most common mistake with Access Control Models?
RBAC can suffer role explosion as exceptions multiply, and DAC lets users share too broadly.
What should I learn before this topic?
Start with Authentication vs Authorization, the topic just before it in Security & Cryptography.
How can I practice it?
Answer the mini quiz in the interactive lesson, then take the Security & Cryptography quiz.
Is Access Control Models hard to learn?
It is a Beginner topic, so it works as an entry point. If the terms are new, read the explanation twice and try the visualizer before the quiz.
How long does it take to learn Access Control Models?
Most learners can read the explanation and finish the interactive lesson in under an hour. Fluency comes from applying the idea, so plan a few short practice sessions with the quiz.
Which topics are related to Access Control Models?
Authentication vs Authorization, Encryption Basics, Principle of Least Privilege are closely connected. The full list is in the related topics section of this page.
What should I study after Access Control Models?
Continue with Encryption Basics, the next topic in Security & Cryptography.

Related topics