Other Access Techniques

The following access control types aremore granular in nature and can be used
in combination with any of the previously discussed controls and models. The
operating system or application would need to provide these types of controls
for themto be available to be configured by the administrator or security officer.
• Physical location A user may be allowed access to a resource only if
she has interactively logged in to a computer, meaning that she is physically
at a computer and not logged in remotely.
• Logical location An administrator can restrict access to resources by
IP addresses, which is a logical location on a network.
• Time of day A control mechanism can be configured to only allow
access to resources between certain hours of the day and certain days
of the week.
• Transaction type Restrictions based on operations that are requested
to be carried out. A bank teller may be able to deposit checks but not
cash checks. This would be a type of transaction access restriction.