Identification and Permission Management::Permission Control

Permission Control Aggregate Function manages roles and related permissions and controls permissions according to roles and related rules.<br/>It consists in evaluating if a requester is granted the permission to act by providing the required evidence. The evidence corresponds to the condition specified for each right (for instance keying the correct password to use a specific mailbox). If the action is protected via a right which is assigned (possibly via a role) to a person then the person has to be identified to retrieve their rights and verify if the request to act can be granted.<br/>