Access Control / Usability
Kind: tension
Record: tension:access-control-usability
Canonical: Schema
"access-control" (security-core layer) is traded against "Usability" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Usability" and choosing an explicit operating point.
Listed in Tensions, after Authorization / Policy Complexity and before Role-Based Access Control (RBAC) / Role Explosion.