When every exception becomes a new role, you need attributes

If your permission matrix keeps growing a new role for every customer exception, that is usually a modeling problem, not a staffing problem. RBAC is great when access follows a stable job function: editors edit documents, admins manage the workspace. It starts to crack when the real rule is conditional. "Editors in the EU can edit GDPR-tagged docs... Weiterlesen