Concerns that £360m data platform for NHS England is being set up to fail

theregister.com

16 points·spzb··4 comments

> The body said "purpose-based access control" was a term which had been used in the computing industry for 20 years

I can find references to "policy-based access control" (same acronym) going back decades (and plenty of mentions of the widely-used and understood RBAC) but not purpose-based access control. Is it the same thing, or is there some confusion here?

I'm not sure if this [0] (2007) is introducing the term, or just one such model an using the term to describe it. Not obviously associated with Palantir. I hadn't heard it before either.

[0] - https://ieeexplore.ieee.org/document/4299765/authors

Well knowing how poorly previous NHS IT projects have gone historically, and how there have always been vast layers of useless middle management in these NHS IT projects, and how much corruption and back room deals are prevalent in the Conservative government it would not surprise me to find out it’s just RBAC under a different name for obfuscation and removal of accountability via vague requirements that turn into deliberate money pits.

It would be easier to list the government software projects with contracts that large which aren't set up to fail. How many billions have been spent building all this government specified CRUD that never ends up working properly, but reliably enriches the friends and family of the politicians and bureaucrats buying it?

Reply on news.ycombinator.com