基于角色的权限分配和管理中的方法

Ways of Distributing and Administering Privilege Based on Role

对当前权限系统设计过程中的主要权限分配方法进行介绍和比较,发现它们各自的灵活性和适用性不一样,并着重讨论了基于角色的访问控制模块,分析了RBAC模型中用户、角色与操作权限之间的关系。在此基础上,提出了一种应用于办公自动化系统中较安全的操作权限的实现思想,通过分析提出了五种可行的操作权限分配过程中的解决方法,并评价了各自的优点与不足。

Introduces and compares several primary ways of distributing privileges during current designing privilege system, and finds that these methods are very flexible and their applicabilities are also different. A role-based access control module is discussed by analysing the relations among user,role and privilege, and brings up one idea of realizing secure designing privilege system applied in OA. At last gives five methods of resolving manipulating permission, and compares their merits and disadvantages among them.