BestHub
Sign in
Tagged articles

ABAC

11 articles · Page 1 of 1
Xiaolin Talks Programming
Xiaolin Talks Programming
Sep 20, 2026 · Backend Development

Why RBAC Isn't Enough: Building an ABAC Policy Engine with Spring Security

The article explains why RBAC fails for complex resource and context permissions, introduces ABAC with SpEL expressions, shows Spring Security integration via PermissionEvaluator, policy storage using SpEL strings, a deny-first policy engine, real-world scenarios (department orders, document visibility, time-based access), list permissions via SQL filtering, hot reload with Caffeine/Redis, and pitfalls like self-invocation and DB calls in policies.

ABACAttribute-Based Access ControlData Permissions
0 likes · 17 min read
Why RBAC Isn't Enough: Building an ABAC Policy Engine with Spring Security
Frontline Investigation
Frontline Investigation
Sep 3, 2026 · Information Security

Permission Revoked, Data Still Visible? Uncovering the Four Dimensions of Access Residuals

This article analyzes why revoking user permissions often fails to stop data access, identifying four dimensions of visibility residuals—people, paths, data, and time—and proposes a three-layer verification framework (action, path, result) to ensure actual access termination beyond mere authorization removal.

ABACAccess ControlNIST
0 likes · 11 min read
Permission Revoked, Data Still Visible? Uncovering the Four Dimensions of Access Residuals
Xiaolin Talks Programming
Xiaolin Talks Programming
Aug 3, 2026 · Backend Development

Dynamic Data Permissions in Spring Boot: Row/Column-Level Control with MyBatis-Plus

This article details a production-ready dynamic data permission system using Spring Boot 3.x and MyBatis-Plus 3.5+, covering row-level interception via JSqlParser, column-level masking with Jackson serialization, RBAC+ABAC hybrid model, two-level caching with Caffeine and Redis, and lessons learned from handling complex JOINs, hot updates, and performance overhead.

ABACCaffeine CacheColumn-Level Masking
0 likes · 18 min read
Dynamic Data Permissions in Spring Boot: Row/Column-Level Control with MyBatis-Plus
Linyb Geek Road
Linyb Geek Road
Jul 29, 2026 · Artificial Intelligence

How to Prevent RAG from Leaking Confidential Company Data

The article explains why Retrieval‑Augmented Generation (RAG) can unintentionally expose sensitive corporate documents and provides a step‑by‑step security framework—including metadata design, pre‑filter enforcement, access‑control models, safe caching, logging practices, and comprehensive testing—to ensure that only authorized users ever see protected content.

ABACAccess ControlRAG
0 likes · 14 min read
How to Prevent RAG from Leaking Confidential Company Data
Open Source Tech Hub
Open Source Tech Hub
Aug 24, 2025 · Information Security

Mastering PHP-Casbin: A Lightweight, Cross‑Framework Permission Solution

PHP‑Casbin is an open‑source, lightweight permission framework for PHP that separates policy from model, supports multiple access‑control models (ACL, RBAC, ABAC, etc.), integrates with popular frameworks via Composer, offers dynamic policy management, caching, and multi‑tenant capabilities, solving common permission pitfalls in SaaS, e‑commerce, and government systems.

ABACAccess ControlCasbin
0 likes · 12 min read
Mastering PHP-Casbin: A Lightweight, Cross‑Framework Permission Solution
Architect
Architect
Oct 12, 2024 · Information Security

Understanding ACL, ABAC, and RBAC: Choosing the Right Access Control Model

This article introduces three common permission models—ACL, ABAC, and RBAC—explaining their core concepts, how they manage user access through objects, attributes, or roles, and discusses the strengths and limitations of each approach for secure system design.

ABACACLAccess Control
0 likes · 8 min read
Understanding ACL, ABAC, and RBAC: Choosing the Right Access Control Model
政采云技术
政采云技术
Jan 23, 2024 · Big Data

Design and Implementation of a Big Data Permission Management System

This article outlines the background, importance, scenarios, challenges, objectives, and architectural design—including RBAC and ABAC models, metadata integration, data classification, and verification mechanisms—of a comprehensive big data permission management system for secure and fine‑grained data access.

ABACAccess ControlRBAC
0 likes · 14 min read
Design and Implementation of a Big Data Permission Management System
Weimob Technology Center
Weimob Technology Center
Nov 24, 2022 · Information Security

Designing a Flexible Permission Model for WOS: Merging RBAC and PBAC

This article examines traditional RBAC, ABAC, and PBAC access‑control models, evaluates their strengths and weaknesses, and presents a hybrid permission architecture tailored for 微盟's WOS system that combines role‑based and attribute‑based rules to achieve high flexibility and fine‑grained authorization.

ABACAccess ControlAuthorization
0 likes · 8 min read
Designing a Flexible Permission Model for WOS: Merging RBAC and PBAC
IT Services Circle
IT Services Circle
Aug 5, 2022 · Information Security

Designing Permission Systems: Overview of ACL, DAC, MAC, ABAC, and RBAC Models

This article explains the fundamentals of permission system design, introducing five mainstream access control models—ACL, DAC, MAC, ABAC, and RBAC—detailing their principles, examples, advantages, drawbacks, and practical implementation considerations such as role hierarchy, constraints, and data permissions.

ABACAccess ControlRBAC
0 likes · 15 min read
Designing Permission Systems: Overview of ACL, DAC, MAC, ABAC, and RBAC Models
Zhuanzhuan Tech
Zhuanzhuan Tech
Jun 13, 2022 · Information Security

Design of Zhuanzhuan's Unified Permission Management System – Part 1: Architecture and Models

This article introduces the problems of the legacy permission approach at Zhuanzhuan, compares industry‑standard RBAC and ABAC models, explains the design rationale for a hybrid RBAC‑based system, and outlines the core modules, role hierarchy, and permission types for the new unified permission management platform.

ABACAccess ControlAuthorization
0 likes · 15 min read
Design of Zhuanzhuan's Unified Permission Management System – Part 1: Architecture and Models
Open Source Tech Hub
Open Source Tech Hub
Apr 8, 2021 · Information Security

How to Implement ABAC with PHP‑Casbin for Fine‑Grained Access Control

This guide explains how to use PHP‑Casbin to enforce attribute‑based access control (ABAC) by defining request, policy, and matcher sections, creating attribute‑rich objects, and calling the enforcer to obtain true or false decisions for different subjects and resources.

ABACAccess ControlAttribute-Based Access Control
0 likes · 2 min read
How to Implement ABAC with PHP‑Casbin for Fine‑Grained Access Control