SECAI Core · phase 10 of 15 · noun
Access control
The process of determining and assigning privileges to resources, objects, and data. Each resource has an access control list (ACL) specifying what subjects (users and hosts) can do.
The Explain card
- Plain English
- Access control is the process of deciding and assigning who may do what to which resources, objects and data. Each resource carries an access control list (ACL) saying which subjects, users or hosts, can act on it.
- Example
- A retrieval-augmented system indexes company documents. Each chunk inherits the ACL of its source file, so when the model fetches context for a user, it only pulls passages that user is already allowed to read.
- Why it matters
- Models flatten permissions by default: if the data is in the index, the model will happily use it. Carrying ACLs through to retrieval and tools is how defenders stop AI becoming a universal key.
- Hook
- The guest list, enforced at every door.
Word knowledge
How the word is built, where it came from, and what it sits beside in memory.
In a sentence
The AI gateway applies access control before sending a user's inference request to a model endpoint containing sensitive customer data.
Why these words
- access Latin accessus, approach or entrance, through Old French names the entry or use being governed
- control Anglo-French contrerolle, a duplicate register used for checking names the governing or checking function
Where it came from
- Origin
- an English compound joining access, from Latin accessus, with control, from Anglo-French contrerolle
- Entered the language
- 20th century
- What changed
- Access broadened from physical approach to system use, while control shifted from checking accounts against a counter-roll to regulating operations; computing joined them as a technical phrase.
How it is spelled
- Pattern
- The prefix ad- assimilates to ac- before c in access.
- Pattern
- The final l in control doubles before vowel-led suffixes, as in controlled and controlling.
Spelled like
- accede
- accelerate
- compelled
- referred
Broken into chunks
-
access
- accede
- accession
-
control
- controller
- controlling
What it sits beside
Same subject
- authentication
- authorization
- least privilege
- identity management
Same shape
- quality control
- traffic control
- version control
access control models
- role-based access control
- attribute-based access control
- mandatory access control
Where it sits in the deck
Phase 10: Identity, Access, and Cryptographic Foundations
Before examining threats to systems, establish the foundational security primitives — identity, authentication, authorization, and the cryptography underpinning them.
