In computer systems security, Relationship-based access control (ReBAC) defines an authorization paradigm where a subject's permission to access a resource is defined by the presence of relationships between those subjects and resources.
History
The term ReBAC was coined by Carrie E. Gates in 2006. In 2019 Google published a paper presenting "Zanzibar: Google’s Consistent, Global Authorization System". The paper defines a system composed of a namespace configuration and relationship data expressed as triples. Since the release of that paper, several companies have built commercial and open source offerings of ReBAC systems. == See also ==