--- title: In Search of a Perfect Access Control System | daily.dev description: A historical deep-dive traces access control design from 1960s time-sharing systems and the Bell-La Padula security model through Multics ACLs, Unix DAC,... canonical: https://daily.dev/posts/in-search-of-a-perfect-access-control-system-xe9l6uhum twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: In Search of a Perfect Access Control System | daily.dev og:description: A historical deep-dive traces access control design from 1960s time-sharing systems and the Bell-La Padula security model through Multics ACLs, Unix DAC,... og:url: https://daily.dev/posts/in-search-of-a-perfect-access-control-system-xe9l6uhum og:image: https://api.daily.dev/og/posts/xE9l6UhUM.png og:image:alt: In Search of a Perfect Access Control System og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # In Search of a Perfect Access Control System **[Teleport](https://daily.dev/sources/teleport)** · 17 min read · 0 upvotes · 0 comments ## Summary A historical deep-dive traces access control design from 1960s time-sharing systems and the Bell-La Padula security model through Multics ACLs, Unix DAC, SELinux MAC, RBAC, ABAC/policy-as-code, and logic-based systems like Prolog, Datalog, and Binder. The piece critiques each model's tradeoffs and distills four properties a solid access control system should have: security invariants, transparency/identity, privilege escalation flow, and distributed identity verification. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is the difference between the simple security property and the star property in the Bell-La Padula model? The simple security property (ss-property) restricts subjects to reading objects at the same or lower security level, known as read down. The star property (*-property) prevents subjects with read access to a higher-level object from writing to a lower-level object, known as write up, blocking classified information from leaking downward through a malicious program. _Teams designing invariant-based access rules can find deep dives like this on daily.dev._ ### How does role-based access control (RBAC) differ from discretionary access control (DAC)? RBAC decouples permissions from individual users or files and assigns them to abstract roles instead, so admins manage role-to-transaction mappings rather than per-user grants. DAC, defined in the Bell-La Padula model, ties access to a resource owner who decides who else can access it. RBAC, proposed by David F. Ferraiolo and D. Richard Kuhn at the Department of Commerce, was later adopted by systems like Kubernetes. _Comparing access control models for a new system? daily.dev surfaces write-ups like this for that decision._ ### What is Binder and why was it never adopted as a production access control system? Binder is a logic-based security language proposed by Microsoft researcher John DeTreville in 2002, built on Datalog, a subset of Prolog. It encoded client identity as statements in X.509 web certificates and let programs introspect, cache, and query security rules across organizations, but despite its elegant design it was never built for production use. _Exploring policy-language design tradeoffs is easier with sources like this on daily.dev._ ## Similar posts on daily.dev - [The Essential Guide to Access Control](https://daily.dev/posts/the-essential-guide-to-access-control-34kfxpgrj) · Descope · 0 upvotes · 0 comments - [How Attribute-Based Access Control Helps You Write Better Authorization Rules](https://daily.dev/posts/how-attribute-based-access-control-helps-you-write-better-authorization-rules-uk1hcwjwk) · freeCodeCamp · 1 upvotes · 0 comments - [What Is Role-Based Access Control \(RBAC\)?](https://daily.dev/posts/what-is-role-based-access-control-rbac--ofppjlkdu) · Nordic APIs · 0 upvotes · 0 comments - [RBAC vs ReBAC: Comparing Role-Based & Relationship-Based Access Control](https://daily.dev/posts/rbac-vs-rebac-comparing-role-based-relationship-based-access-control-a4hkfzjx5) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#authorization](https://daily.dev/tags/authorization) [View this post on daily.dev](https://daily.dev/posts/in-search-of-a-perfect-access-control-system-xe9l6uhum) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"In Search of a Perfect Access Control System","url":"https://daily.dev/posts/in-search-of-a-perfect-access-control-system-xe9l6uhum","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/in-search-of-a-perfect-access-control-system-xe9l6uhum"},"datePublished":"2026-08-23T12:19:34.949Z","dateModified":"2026-08-23T12:37:54.455Z","description":"A historical deep-dive traces access control design from 1960s time-sharing systems and the Bell-La Padula security model through Multics ACLs, Unix DAC,...","image":"https://media.daily.dev/image/upload/s--2-1xRawN--/f_auto/v1722860399/public/Placeholder%2011","thumbnailUrl":"https://media.daily.dev/image/upload/s--2-1xRawN--/f_auto/v1722860399/public/Placeholder%2011","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/in-search-of-a-perfect-access-control-system-xe9l6uhum","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,authorization","timeRequired":"PT17M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"In Search of a Perfect Access Control System"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/in-search-of-a-perfect-access-control-system-xe9l6uhum#faq","mainEntity":[{"@type":"Question","name":"What is the difference between the simple security property and the star property in the Bell-La Padula model?","acceptedAnswer":{"@type":"Answer","text":"The simple security property (ss-property) restricts subjects to reading objects at the same or lower security level, known as read down. The star property (*-property) prevents subjects with read access to a higher-level object from writing to a lower-level object, known as write up, blocking classified information from leaking downward through a malicious program. Teams designing invariant-based access rules can find deep dives like this on daily.dev."}},{"@type":"Question","name":"How does role-based access control (RBAC) differ from discretionary access control (DAC)?","acceptedAnswer":{"@type":"Answer","text":"RBAC decouples permissions from individual users or files and assigns them to abstract roles instead, so admins manage role-to-transaction mappings rather than per-user grants. DAC, defined in the Bell-La Padula model, ties access to a resource owner who decides who else can access it. RBAC, proposed by David F. Ferraiolo and D. Richard Kuhn at the Department of Commerce, was later adopted by systems like Kubernetes. Comparing access control models for a new system? daily.dev surfaces write-ups like this for that decision."}},{"@type":"Question","name":"What is Binder and why was it never adopted as a production access control system?","acceptedAnswer":{"@type":"Answer","text":"Binder is a logic-based security language proposed by Microsoft researcher John DeTreville in 2002, built on Datalog, a subset of Prolog. It encoded client identity as statements in X.509 web certificates and let programs introspect, cache, and query security rules across organizations, but despite its elegant design it was never built for production use. Exploring policy-language design tradeoffs is easier with sources like this on daily.dev."}}]} ```