What is RBAC and how is it implemented in different programming languages?

What is RBAC and how is it implemented in different programming languages?

RBAC stands for Role-Based Access Control. It's a method of restricting system access to authorized users based on their roles. Different programming languages implement RBAC in various ways. For example, in Python, you might use decorators to check user roles, while in Java, you could use annotations.

Can you give me an example of RBAC in Python?

Sure! In Python, you can create a decorator that checks if a user has the required role before allowing access to a function. Here's a simple example:

roles = {'admin': ['view', 'edit', 'delete'], 'user': ['view']}

def role_required(role):
    def decorator(func):
        def wrapper(user_role, *args, **kwargs):
            if user_role in roles and 'view' in roles[user_role]:
                return func(*args, **kwargs)
            else:
                raise PermissionError('Access denied')
        return wrapper
    return decorator

@role_required('admin')
def edit_content():
    return 'Content edited!'

How about an example in Java?

In Java, you can use annotations to implement RBAC. Here's a simple example using a custom annotation:

@Retention(RetentionPolicy.RUNTIME)
@Target(ElementType.METHOD)
public @interface RoleRequired {
    String value();
}

public class AccessControl {
    @RoleRequired("admin")
    public void editContent() {
        System.out.println("Content edited!");
    }

    public void checkAccess(String role) {
        // Logic to check if the role matches the required role
    }
}