アクセス権access rights

Learn in the textbookThe Role and Basic Functions of an OS

DefinitionAccess rights (アクセス権) are settings that define which users may perform which operations, such as read (読取り) and write (書込み), on a file or folder.

ExplanationKinds of operations include read, which views the content, write, which changes it, and execute (実行), which runs it as a program. Permissions can be granted per user or per group, and the basic idea is to give only what the job requires (least privilege, 最小権限).

AnalogyIt is like the different keys in an apartment building. A resident's key opens both their own unit and the shared areas, while the code given to couriers opens only the parcel lockers.

Memory hookR, W and X stand for Read, Write and eXecute: viewing, changing and running.

Learn in the textbookFundamentals of Access Control and Network Defense Devices

DefinitionAccess rights (アクセス権) define, for a resource such as a file or database, who may perform which operations.

ExplanationPermissions can be set separately for each kind of operation, such as view, edit and delete, and granted either to individual users or to whole groups such as departments. As a rule, people get only the rights their work needs, which is the principle of least privilege (最小権限). Excess rights widen the damage when someone makes a mistake or an account is hijacked.

AnalogyIt is like staff ID cards that open different doors for different people. Even within one company, some cards open the storeroom and some do not.

Memory hookIn “access right”, right means an entitlement, not “correct”: picture a list of what each person is entitled to do.