Page 1 of 1

Security Model Design

Posted: Mon Aug 21, 2006 5:45 am
by matthias
Ok, I'm desinging an interface to add more security to my OS. I have a user and a group interface. The user interface is just to keep track of users and place them in groups, this is where the group interface comes in. The group interface manages all security issues and handles all the cheking of rights of users within a group.

Now when a user does a request it has to go through the following procedure:

Image

Is this a good security model or do I need to add some extra security chekking?

Posted: Mon Aug 21, 2006 7:39 am
by Legend
http://en.wikipedia.org/wiki/Role-based_access_control

Btw. it is checking, not chekking. ;)

Posted: Mon Aug 21, 2006 7:41 am
by matthias
Legend wrote:http://en.wikipedia.org/wiki/Role-based_access_control

Btw. it is checking, not chekking. ;)
Thanks, I will chekk (:wink:) it later