For over a decade, Drupal has relied on the Role Based Access Control (RBAC) model to manage access. Though very powerful, it also has its limitations. For example, it can be difficult to scale, and it’s not uncommon for large projects to experience “role explosion.”

Enter Attribute Based Access Control (ABAC). A new paradigm in access control management that has been taking off in popularity in the last few years.

With ABAC, you can build a highly intuitive and flexible system that grows with the needs of your organization. In this presentation, I’ll give an overview of what ABAC is, how it compares with other authorization models, why Drupal is well positioned to integrate it, and how you can implement it today in Drupal using the Access Policy module.