# RBAC

Record: `arch:role-based-access-control`
Kind: model
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Severity: contextual
Scope: user, role, resource
Canonical: https://banes-lab.com/ontology#arch-role-based-access-control

## Repair

- Refactored by: Centralize Role Policy
- Detected by: scattered role checks
- Violated by: hardcoded user-specific access logic
- Measured by: role-policy consistency
- Enforced by: authorization tests

## requires

- [Role Definitions](https://banes-lab.com/records/lex/role-definitions.md)

## reinforces

- [Access Control](https://banes-lab.com/records/arch/access-control.md)

## enables

- [Coarse-Grained Permission Management](https://banes-lab.com/records/lex/coarse-grained-permission-management.md)

## conflicts-with

- [Ad-Hoc Permission Checks](https://banes-lab.com/records/lex/ad-hoc-permission-checks.md)

## tensions-with

- [Role Explosion](https://banes-lab.com/records/lex/role-explosion.md)

## tensions

- [RBAC Role Explosion](https://banes-lab.com/records/tension/rbac-role-explosion.md)