基于角色和部门的两级访问控制模型

Two Level Access Control Model Based on Role and Department

在典型RBAC的基础上,提出一种基于角色和部门的两级访问控制模型DRBAC,将部门从角色的一个属性独立抽象出来,使角色和部门共同决定主体对客体的访问权限,并将授权过程事务化,以降低操作要求。

A new access control model DRBAC based on role and department is proposed, which extends the traditional role-based access control （RBAC） model. The new model adds the abstraction of the department property and simplifies the operational process by authenticating management based on transaction.