基于用户群组RBAC模型的一种实现方法

Realizing the Model of RBAC Based on Group with the EJB-CMP/CMR

在基于角色的访问控制中 ,只有角色具有权限 ,用户必须被赋予某种角色才能取得相应的访问权限 ,通过引入群组 ,把各个不同的用户具有相同的角色集归为同一用户群组 ,对多个用户授权压缩为对同一群组授权 ,减少了授权工作量。采用 J2 EE平台中的 EJB- CMP/ CMR技术 ,CMR为基于群组的 RBAC模型的实现提供了很好的支持 。

In role-based control (RBAC), roles have the permissions. A user must be granted one of the roles to acquire the corresponding access right. Through introducing group, we can sort different users who owned the same role into a group and give right to this group instead of having different users with individual right. In this way, it can lessen the workload. We implemented this mode by the technology of EJB-CMP/CMR in J2EE platform.