基于用户-角色-功能的个性化权限控制策略模型

Based on user-role function’s individuality privileges control strategy model

对B/S模式信息系统的安全权限控制策略进行了研究,根据目前权限控制存在的缺陷,提出了基于用户-角色-功能的个性化权限控制模型,实现了根据用户的不同分工灵活组装功能来定制界面。把最小操作功能当作原子,系统界面当作分子,利用了分子由原子组成的思想。该模型有效地保证了信息系统数据的安全性,具有很强的通用性和扩展性。

This article has researched on the B/S pattern information system safety privileges control strategy, according to the existence flaw of present privileges control strategy, proposed an individuality Safety privileges control strategy model which based on the user-role-function and the user interface. Based on this model has realized customized user interface according to user＇s different division of labor nimble. Treat the smallest operation functions as the atom, the system surface as the molecule, has usecl the thought of that molecule is made of atoms. This model can guarantee the information system data＇s security effectively, has the very strong versatility and the extension.