Referentie rechtenmodel

Focusgebieden

Vier gestructureerde gebieden die voor dit onderwerp het belangrijkst zijn.

1. 01

   Rollen, niet personen, dragen de bevoegdheid

   Rechten worden aan rollen toegekend — beoordelaar, goedkeurder, projectleider — zodat personeelswijzigingen nooit achtergebleven toegang achterlaten.

2. 02

   Beperk tot de context

   Dezelfde gebruiker kan in het ene project goedkeurder zijn en in het andere alleen lezer. Beperking per context houdt werken met minimale rechten praktisch.

3. 03

   Scheid kijken van handelen

   Lezen, bewerken, goedkeuren, vrijgeven en verwijderen zijn afzonderlijke bevoegdheden. Een gebruiker kan beoordelen zonder enige bevoegdheid om het dossier te wijzigen.

4. 04

   Leg elke toewijzing vast

   Elke rechtentoeewijzing wordt gelogd. Bij een audit kunt u precies beantwoorden wie wat waar en sinds wanneer mocht doen.

5. 05

   resources.items.permissions-model.sections.4.heading

   resources.items.permissions-model.sections.4.body

6. 06

   resources.items.permissions-model.sections.5.heading

   resources.items.permissions-model.sections.5.body

7. 07

   resources.items.permissions-model.sections.6.heading

   resources.items.permissions-model.sections.6.body

8. 08

   resources.items.permissions-model.sections.7.heading

   resources.items.permissions-model.sections.7.body

9. 09

   resources.items.permissions-model.sections.8.heading

   resources.items.permissions-model.sections.8.body

10. 10

    resources.items.permissions-model.sections.9.heading

    resources.items.permissions-model.sections.9.body

11. 11

    resources.items.permissions-model.sections.10.heading

    resources.items.permissions-model.sections.10.body

12. 12

    resources.items.permissions-model.sections.11.heading

    resources.items.permissions-model.sections.11.body

13. 13

    resources.items.permissions-model.sections.12.heading

    resources.items.permissions-model.sections.12.body

14. 14

    resources.items.permissions-model.sections.13.heading

    resources.items.permissions-model.sections.13.body

15. 15

    resources.items.permissions-model.sections.14.heading

    resources.items.permissions-model.sections.14.body

16. 16

    resources.items.permissions-model.sections.15.heading

    resources.items.permissions-model.sections.15.body

17. 17

    resources.items.permissions-model.sections.16.heading

    resources.items.permissions-model.sections.16.body

18. 18

    resources.items.permissions-model.sections.17.heading

    resources.items.permissions-model.sections.17.body

19. 19

    resources.items.permissions-model.sections.18.heading

    resources.items.permissions-model.sections.18.body

20. 20

    resources.items.permissions-model.sections.19.heading

    resources.items.permissions-model.sections.19.body

21. 21

    resources.items.permissions-model.sections.20.heading

    resources.items.permissions-model.sections.20.body

22. 22

    resources.items.permissions-model.sections.21.heading

    resources.items.permissions-model.sections.21.body

23. 23

    resources.items.permissions-model.sections.22.heading

    resources.items.permissions-model.sections.22.body

24. 24

    resources.items.permissions-model.sections.23.heading

    resources.items.permissions-model.sections.23.body

25. 25

    resources.items.permissions-model.sections.24.heading

    resources.items.permissions-model.sections.24.body

26. 26

    resources.items.permissions-model.sections.25.heading

    resources.items.permissions-model.sections.25.body

27. 27

    resources.items.permissions-model.sections.26.heading

    resources.items.permissions-model.sections.26.body

28. 28

    resources.items.permissions-model.sections.27.heading

    resources.items.permissions-model.sections.27.body

29. 29

    resources.items.permissions-model.sections.28.heading

    resources.items.permissions-model.sections.28.body

30. 30

    resources.items.permissions-model.sections.29.heading

    resources.items.permissions-model.sections.29.body

31. 31

    resources.items.permissions-model.sections.30.heading

    resources.items.permissions-model.sections.30.body

32. 32

    resources.items.permissions-model.sections.31.heading

    resources.items.permissions-model.sections.31.body

33. 33

    resources.items.permissions-model.sections.32.heading

    resources.items.permissions-model.sections.32.body

34. 34

    resources.items.permissions-model.sections.33.heading

    resources.items.permissions-model.sections.33.body

35. 35

    resources.items.permissions-model.sections.34.heading

    resources.items.permissions-model.sections.34.body

36. 36

    resources.items.permissions-model.sections.35.heading

    resources.items.permissions-model.sections.35.body

37. 37

    resources.items.permissions-model.sections.36.heading

    resources.items.permissions-model.sections.36.body

38. 38

    resources.items.permissions-model.sections.37.heading

    resources.items.permissions-model.sections.37.body

39. 39

    resources.items.permissions-model.sections.38.heading

    resources.items.permissions-model.sections.38.body

40. 40

    resources.items.permissions-model.sections.39.heading

    resources.items.permissions-model.sections.39.body

41. 41

    resources.items.permissions-model.sections.40.heading

    resources.items.permissions-model.sections.40.body

42. 42

    resources.items.permissions-model.sections.41.heading

    resources.items.permissions-model.sections.41.body