tag:blogger.com,1999:blog-4148881248275379081.comments2010-05-12T22:01:38.441-05:00Eric Rosenzweighttp://www.blogger.com/profile/15436026516805700823noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-4148881248275379081.post-56794250604593176172010-05-12T22:01:38.366-05:002010-05-12T22:01:38.366-05:00Great insights Eric!Kelly Mantheyhttp://www.blogger.com/profile/03865707160740084247noreply@blogger.comtag:blogger.com,1999:blog-4148881248275379081.post-46507073523133402752010-02-19T13:32:01.334-06:002010-02-19T13:32:01.334-06:00It almost sounds like you're describing Attribute Based Access Control at the beginning. The issue I have with RBAC is that not everyone fits into a pre-defined role perfectly when you can get more granular using security groups and/or attributes without any more work. Talking to Gartner the other day, we got a laugh out of calling it "fitting a square user into a round role".Edwardhttp://blog.imanami.comnoreply@blogger.com