ACL
Access Control list - list of permissions
Identification
Create an account or ID
Authentication
Proving who you are
Authorization
Determine what permissions you have
Accounting
Tracking what people do
Least Privilege
a user should be granted rights to perform their job and nothing more.
Implicit Deny
unless there is a rule that grants a permission, any request for access is denied.