Attribute-Based Access Control (ABAC) / Policy Complexity
Kind: tension
Record: tension:attribute-based-access-control-abac-policy-complexity
Canonical: Schema
"attribute-based-access-control" (security-core layer) is traded against "Policy Complexity" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Policy Complexity" and choosing an explicit operating point.
Listed in Tensions, after Role-Based Access Control (RBAC) / Role Explosion and before Input Validation / Input Flexibility.