Policy-based access control for weakly consistent replication
Ted Wobber, Thomas L. Rodeheffer, Douglas B. Terry · 2010
Combining access control with weakly consistent replication presents a challenge if the resulting system is to support eventual consistency. If authorization policy can be temporarily inconsistent, any given operation may be permitted at one node and yet denied at another. This is especially troublesome when the operation in question involves a change in policy. Without a careful design, permanently divergent state can result.