Role-Based Access Control for Developers

The addition of role-based access control (RBAC) to the Solaris operating environment gives developers the opportunity to deliver fine-grained security in new and modified applications. RBAC is an alternative to the all-or-nothing security model of traditional superuser-based systems. With RBAC, an administrator can assign privileged functions to specific user accounts (or special accounts called roles). Developers can now create privileged functions that check for authorizations instead of checking for specific IDs such as superuser.

For more information, see the System Administration Guide, Volume 2 and the man page rbac(5).