Overview of Attribute-Based Access Control (ABAC)
Attribute-Based Access Control (ABAC) provides fine-grained, row-level security that complements Role-Based Access Control (RBAC). While RBAC determines which tables a user can access, ABAC determines which specific rows within those tables are visible based on attributes (tags) and policies. Enforcement happens in two layers: AI Guidance (generating queries with correct filters) and Server-Side Validation (blocking queries that lack required filters).