| Definition |
An access control list (ACL), with respect to a computer file system, is a list of permissions attached to an object. An ACL specifies which users or system processes are granted access to objects, as well as what operations are allowed on given objects. Each entry in a typical ACL specifies a subject and an operation. For instance, if a file object has an ACL that contains (Alice: read,write; Bob: read), this would give Alice permission to read and write the file and Bob to only read it.
See also: ACL.
Access Control List (ACL) is a Network Security concept used to protect traffic, access, devices, applications, or segments from misuse or attack.
|
| Context & Usage |
In security and compliance work, this term helps teams describe controls, risks, identity practices, standards, audits, or protective technologies. It is relevant when managing access, reducing exposure, documenting safeguards, or demonstrating accountability.
Security and infrastructure teams use this concept to reduce exposure, enforce access boundaries, inspect traffic, and limit the impact of compromise.
Related concepts include Routing.
Additional Resource: NIST Computer Security Resource Center Glossary.
|