|Document type:||Building Block Type||Owner:|
This Building Block Type belongs to Working Area Middleware (MW).
It offers a means to store and publish permissions (technical representations of business rules about infrastructural actions like reading or writing information). It usually accompanies a Permission Validation facility.
Note that permissions most often cannot be written in a standard format; thus, the capabilities of a Permission Register with respect to the kinds of permissions it can handle are hard-coded. This means that if a Permission Register (and Permission Validation) facility is positioned in an infrastructure landscape to authorize access to a set of resources, it cannot automatically be assumed fit to also authorize access to a new, different set of resources. E.g. a Permission Register that holds access control lists for web addresses cannot be assumed to also be able to hold access control lists to modules of a specific business application.
Permission Register is modelled separately from Permission Validation for two major reasons:
- to account for the security aspects (both in the sense that a Permission Register itself must be properly secured, and that positioning a Permission Register in an infrastructure overview serves as a focal point for security considerations), and
- because the permissions that can be stored in a particular Permission Register instance are inherently limited to a specific set of actions (as described above).
The icon below can be used to represent this infrastructure function in graphical Pattern representations that it might be part of:
Variants of this Building Block Type
The following variants of this function have been defined:
No Pattern Variants based on this Pattern Type (yet)
Pattern Types using this Building Block Type
The following Pattern Types use this function:
|Pattern Variant||Brief Description||Owner||Maturity|
|PAT.Authentication+Authorization||Authentication & Authorization||J.A.H. Schoonderbeek||3|