Rule-based access control (RuBAC)
Also called: RuBAC
Course: AP® Cybersecurity Shows up in: Unit 5: Securing Applications and Data
An access control model that checks a set of rules to allow or deny access, usually layered on top of another model.
Appears in the course and exam description (CED): 5.2.C.3
Why it matters in Unit 5
Rules can deny even subjects who normally have access.
Example
A delivery app hides a customer’s phone number from the driver once the delivery is complete.
Learn it properly, with a checkpoint 5.2 Protecting Applications and Data: Managerial Controls and Access Controls