Back to Security Pattern Catalog
: Core Security, Elevation of Privilege
Within a single execution context, program or processes need to act on behalf of multiple subjects. When an execution context, program or process needs to act on behalf of a single subject on multiple occasions over a period of time, it needs to be able to have access to information about the subject whenever it needs to take an action.
How can this be done?
Provide a container for security attributes and data relating to a particular execution context, process, operation or action.
u-Area in Unix where per-process user information is stored.
Security Association, Subject Descriptor
Open Group Catalog
Last modified: May 05, 2012
and Maintained by: Munawar Hafiz