Policy-Based Access Control (PBAC)
The umbrella move of decoupling access decisions from application code into a formal, centrally managed policy — the discipline ABAC, RBAC, and ReBAC rules can all be written and governed under.
aka: PBAC
PBAC isn’t a rival to RBAC or ABAC — it’s the operating model that makes any of them auditable at scale: a formal policy language, a defined lifecycle (author, test, review, publish), and analysis tooling that can answer “what changed” or “does this create a conflict” before a policy ever reaches production. Policy as code is PBAC’s practical, engineering-facing expression.