增强的基于角色的数据库访问控制模型

An enhanced role-based access control model of database

传统的角色访问控制模型(RBAC)由于组成元素过于笼统并且其约束规则过于简单,在安全性上存在一定的缺陷。在传统的角色访问控制模型的基础上,进行了组成元素和约束规则的扩展,同时针对管理权限进行分化管理,形成了一个管理权限分立、约束规则完备和实用性较强的角色访问控制模型ERBAC。

The traditional role based access control model （RBAC） can not avoid some security flaws, because the components and the constraints of the model are too simple. Based on the traditional RBAC, a enhanced RBAC model （ERBAC） was brought forward, which expanded the components and the constraints. Besides, this new model features the separated administrative permissions, complete constraints and better utility.