Can access control cover all matters?

[Kr0nox]

Can access control cover all matters?

Description

The uncertainty related to the comprehensiveness of access control measures, questioning whether the defined rules and policies can effectively cover all possible scenarios and security concerns within a software system.

Literature Reference

Classifications

Category	Option
Location	Behavior
Architectural Element Type	Interface
Type	Recognized Ignorance
Manageability	Partially Reducible
Resolution Time	Runtime
Reducible by ADD	No
Impact on Confidentiality	Indirect
Severity of the Impact	Low

Keywords

Access Control, Human Error

Example

Despite robust access control policies, an unforeseen scenario involving a new user role and resource combination revealed gaps in coverage, prompting a reassessment of access control strategies.

Related Uncertainties

Parent:

#65

Related Uncertainties:

#34, #60, #37