Project Constellation/Security
From HaloWiki
There are three security levels
- Users
- Profiles
- Authorisations
An authorisation is defined as an object type (review, album, user, etc), a key (dependent upon the object type, but usually a single word), and a value. These can be written shorthand as (N_CO_USER, ADMIN, *". This will allow the user to perform "ADMIN" tasks upon "N_CO_USER" objects. The value can be used to narrow down the range of objects that can be accessed. It is not currently used.
An unlimited number of authorisations are grouped into a profile. An authorisation can be a part of multiple profiles. These profiles (really just collections of authorisations), can then be assigned to a user.
