基于角色访问控制在权限管理中的研究与应用

Research and application of Role- Based Access Control in Privilege Management

本文研究了基于角色的访问控制的工作原理及其在某公司ERP系统中的具体应用。针对企业的人员的流动性,建立了用户权限的动态时效性控制。对于各个子系统开发进度的不同,提出了系统对新添模块的权限自适应管理,提高了后台执行效率。利用用户、角色、表单和功能四元素实现了系统访问权限的高弹性和动态控制。

The paper researches into the basic theory of Role-Based Access Control and its applieation in some eompany＇s Enterprise Resource Planning system and establishes user＇ s timeliness control over the employees＇ mobility. The paper also brings forwards the conception of self-adapting management on the privilege of a newly-added module in view of the difference uf each subsystem＇ s developing schedules, which in turn enhances the execution efficiency of background applications and carries out highflexibility and dynamic control of access authorization of the system through User, Role, List and Function database table.