Project Constellation/Security

From HaloWiki

There are three security levels

  • Users
  • Profiles
  • Authorisations

An authorisation is defined as an object type (review, album, user, etc), a key (dependent upon the object type, but usually a single word), and a value. These can be written shorthand as (N_CO_USER, ADMIN, *". This will allow the user to perform "ADMIN" tasks upon "N_CO_USER" objects. The value can be used to narrow down the range of objects that can be accessed. It is not currently used.

An unlimited number of authorisations are grouped into a profile. An authorisation can be a part of multiple profiles. These profiles (really just collections of authorisations), can then be assigned to a user.