一种基于角色的访问控制扩展模型

An Extended Role-based Access Control Model

针对RBAC模型应用于大型Web应用系统中存在授权工作量大、容易误操作等不足,本文提出了一种RBAC扩展模型。将用户组、角色组等引入该模型中,从用户、角色和权限三个方面对RBAC模型进行扩展。该模型能够将复杂的角色集分割成相对比较简单的角色集,方便对用户进行管理和为用户分配角色,提高授权的灵活性。

This paper proposes an extended RBAC Model in order to solve the problems of much work and mistake operation easy when applying RBAC to a large Web application system. We add user group, role group etc. to extend the model from the aspect of user, role and permission. The model can divide the complex role set into some simpler role sets,so that is convenient to manage user and assign roles to user, and the flexibility of authorization has been improved.