{
  "code": null,
  "collection": "tension",
  "href": "https://banes-lab.com/ontology/schema#tension-role-based-access-control-rbac-role-explosion",
  "id": "role-based-access-control-rbac-role-explosion",
  "kind": "tension",
  "layer": null,
  "name": "Role-Based Access Control (RBAC) / Role Explosion",
  "ref": "tension:role-based-access-control-rbac-role-explosion",
  "relations": [
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-role-based-access-control",
          "json": "https://banes-lab.com/json/records/architecture/role-based-access-control",
          "label": "Role-Based Access Control (RBAC)",
          "markdown": "https://banes-lab.com/records/architecture/role-based-access-control.md",
          "ref": "architecture:role-based-access-control"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-role-explosion",
          "json": "https://banes-lab.com/json/records/lexicon/role-explosion",
          "label": "Role Explosion",
          "markdown": "https://banes-lab.com/records/lexicon/role-explosion.md",
          "ref": "lexicon:role-explosion"
        }
      ],
      "relation": "tensions-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#vocabulary-resolution-mechanism-irreducible-tradeoff",
          "json": "https://banes-lab.com/json/records/vocabulary/resolution-mechanism-irreducible-tradeoff",
          "label": "irreducible-tradeoff",
          "markdown": "https://banes-lab.com/records/vocabulary/resolution-mechanism-irreducible-tradeoff.md",
          "ref": "vocabulary:resolution-mechanism-irreducible-tradeoff"
        }
      ],
      "relation": "mechanism"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md",
          "ref": "chapter:/ontology#architecture-category-security-privacy-compliance-governance"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-vocabulary-resolution-mechanism",
          "json": "https://banes-lab.com/json/ontology/schema/the-vocabulary-resolution-mechanism",
          "label": "Resolution mechanisms",
          "markdown": "https://banes-lab.com/ontology/schema/the-vocabulary-resolution-mechanism.md",
          "ref": "chapter:/ontology/schema#the-vocabulary-resolution-mechanism"
        }
      ],
      "relation": "linked-from"
    }
  ],
  "summary": "\"role-based-access-control\" (security-core layer) is traded against \"Role Explosion\" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring \"Role Explosion\" and choosing an explicit operating point.",
  "siblings": {
    "next": {
      "href": "https://banes-lab.com/ontology/schema#tension-attribute-based-access-control-abac-policy-complexity",
      "json": "https://banes-lab.com/json/records/tension/attribute-based-access-control-abac-policy-complexity",
      "label": "Attribute-Based Access Control (ABAC) / Policy Complexity",
      "markdown": "https://banes-lab.com/records/tension/attribute-based-access-control-abac-policy-complexity.md",
      "ref": "tension:attribute-based-access-control-abac-policy-complexity"
    },
    "previous": {
      "href": "https://banes-lab.com/ontology/schema#tension-access-control-usability",
      "json": "https://banes-lab.com/json/records/tension/access-control-usability",
      "label": "Access Control / Usability",
      "markdown": "https://banes-lab.com/records/tension/access-control-usability.md",
      "ref": "tension:access-control-usability"
    }
  },
  "up": {
    "href": null,
    "json": "https://banes-lab.com/json/api/records/tension",
    "label": "Tensions",
    "markdown": "https://banes-lab.com/api/records/tension.md",
    "ref": "api:records/tension"
  }
}