F.0.1:9.5 Deontics × Access — permission vs role (RBAC)

Preface node heading:f-0-1-9-5-deontics-access-permission-vs-role-rbac:47523

Content

  • Context A: ODRL_2_2 - policy/deontics SenseCell⟨permission@ODRL⟩: Tech “permission”; Plain “allowed action”.

  • Context B: NIST_RBAC_2004 - access control SenseCell⟨role@RBAC⟩: Tech “access‑role”; Plain “permission set”.

  • Bridge: ⟨permission@ODRL⟩ ↔⟨member‑of‑set‑in, CL=2, loss: “contextual obligations not preserved”; fit: “RBAC roles aggregate permissions.”⟩ ⟨role@RBAC⟩

  • Concept‑Set hint: Not same row (different kinds); useful linkage for Enactment when binding duties to sessions.